If you could get your hands on the original source, I might be able to tag this with the ANTI-AV filter.  There typically is a marker for the virus being cleaned that is inserted by the software.  Alternatively, this could just be a bad version of the virus that got sent without an attachment in base64 format.

Matt



Andy Schmidt wrote:
Message
Hi,
 
I think many of us are getting swamped with these "cleaned" virus emails - that show up as tiny zip files with no meaningful content.
 
How about we could test "ATTACHMENTSIZE" to give everything extra points to an email if it has a non-plausible attachment length?
 
Best Regards
Andy Schmidt

H&M Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:    +1 201 934-9206

http://www.HM-Software.com/
 



Subject:
something for you
From:
<[EMAIL PROTECTED]>
Date:
Mon, 23 Feb 2004 12:27:40 -0500
To:
<[EMAIL PROTECTED]>

something for you

what does it mean?


-- 
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================


Reply via email to