Exchange 2003 is “after the fact”. See
http://social.technet.microsoft.com/wiki/contents/articles/worm-win32-visal-b.aspx Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: messagel...@gmail.com [mailto:messagel...@gmail.com] Sent: Thursday, September 09, 2010 6:05 PM To: MS-Exchange Admin Issues Cc: MS-Exchange Admin Issues Subject: Re: Possible Email Virus Is there a E2k3 version of this rule? On Sep 9, 2010, at 2:57 PM, Tom Kern <tpk...@gmail.com<mailto:tpk...@gmail.com>> wrote: For those on ex2k7 or ex2k10- Exchange 2010 New-TransportRule -Name 'Here you have' -Comments '' -Priority '0' -Enabled $true -SubjectContainsWords 'here you have' -DeleteMessage $true Exchange 2007 $action = Get-TransportRuleAction DeleteMessage $condition = Get-TransportRulePredicate SubjectContains $condition.Words = @("Here you have") New-TransportRule -name "Here you have" -Conditions @($condition) -Actions @($action) -Priority 0 On Thu, Sep 9, 2010 at 3:37 PM, Kleciak, Clint D A7IT <clint.klec...@cigna.com<mailto:clint.klec...@cigna.com>> wrote: Reports of an email virus hitting some companies today. It has a link to a .scr file that looks like a PDF link. When users click it, it begins sending emails using the GAL or contacts. Not sure of the origin at this point but wanted to send a heads up. The email subject is “Here you have”. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist ------------------------------------------------------------------------------ CONFIDENTIALITY NOTICE: If you have received this email in error, please immediately notify the sender by e-mail at the address shown. This email transmission may contain confidential information. This information is intended only for the use of the individual(s) or entity to whom it is intended even if addressed incorrectly. Please delete it from your files if you are not the intended recipient. Thank you for your compliance. Copyright 2010 CIGNA ============================================================================== --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
