That's what I did for our company...
On Thu, Sep 9, 2010 at 2:57 PM, Tom Kern <tpk...@gmail.com> wrote:
> For those on ex2k7 or ex2k10-
>
>
>
> Exchange 2010
>
>
>
> *New-TransportRule* *-Name* 'Here you have' *-Comments* '' *-Priority* '0'
> *-Enabled* $true *-SubjectContainsWords* 'here you have' *-DeleteMessage*
> $true
>
>
>
> Exchange 2007
>
>
>
> $action = *Get-TransportRuleAction* DeleteMessage
>
> $condition = *Get-TransportRulePredicate* SubjectContains
>
> $condition.Words = @("Here you have")
>
> *New-TransportRule* *-name* "Here you have" -Conditions @($condition)
> -Actions @($action) *-Priority* 0
>
>
>
>
>
> On Thu, Sep 9, 2010 at 3:37 PM, Kleciak, Clint D A7IT <
> clint.klec...@cigna.com> wrote:
>
>> Reports of an email virus hitting some companies today. It has a link to
>> a .scr file that looks like a PDF link. When users click it, it begins
>> sending emails using the GAL or contacts. Not sure of the origin at this
>> point but wanted to send a heads up. The email subject is “Here you have”.
>>
>>
>>
>>
>>
>> ---
>> To manage subscriptions click here:
>> http://lyris.sunbelt-software.com/read/my_forums/
>> or send an email to listmana...@lyris.sunbeltsoftware.com
>> with the body: unsubscribe exchangelist
>>
>> ------------------------------------------------------------------------------
>>
>>
>> CONFIDENTIALITY NOTICE: If you have received this email in error, please
>> immediately notify the sender by e-mail at the address shown. This email
>> transmission may contain confidential information. This information is
>> intended only for the use of the individual(s) or entity to whom it is
>> intended even if addressed incorrectly. Please delete it from your files if
>> you are not the intended recipient. Thank you for your compliance. Copyright
>> 2010 CIGNA
>>
>> ==============================================================================
>>
>>
> ---
>
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist
>
>
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist
