Greetings all,

Three variants of Zerolin keep getting through Imail AV Pro.  Symantec doesn't even 
list Zerolin in its virus DB; McAfee does list the three variants, but doesn't list 
anything specific about the subject, body content, etc. on which I can base an inbound 
rule (this is a DHTML exploit, so there's no attachment).

http://vil.nai.com/vil/content/v_128375.htm

The messages are filtered out by anti-spam and delivered to the spambox, so you'd 
think I could just look at the spambox to build a rule based on the actual message, 
but each of the spamboxes in question have tons of spam messages each day.  It would 
take me many, many hours to look through just one, and I would probably miss it.

Anyone know what I should be looking for?  I've tried a general Google search with 
little luck.

Thanks! 



 
                   

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to