Once again, demime (http://scifi.squawk.com/demime.html) will remove
uuencoded sections from list mail. It also happily strips such crap as
happy99, html alternate sections, etc.
It is in perl, you get source.
At 08:26 AM 2/4/99 EST, Info-LabVIEW List Maintainer wrote:
>One of my lists got hit yesterday by the so-called Win32/Ska.A worm
><http://www.datafellows.com/v-descs/ska.htm>. This sucker slipped by our
>attachment filters because it replicates by uuencoding itself and making
>that uuencoded (ie, text file) the BODY of an outgoing mail msg. No MIME or
>other info is included with it.
>
>You can filter on the header line it adds:
>
>X-Spanska: YES
>
>Or on the beginning of the uuencoded data, which reads:
>
>begin 644
>
>(I'm filtering, in majordomo, on /^begin 6/i)
>
>Just FYI...
>
> Tom Coradeschi, Info-LabVIEW List Maintainer
> <[EMAIL PROTECTED]>
> http://k-whiner.pica.army.mil/info-labview/info-labview.html
>
--
That which does not kill us, makes us stronger.
That which does kill us makes us smell stronger, after a few days, anyway.
Nick Simicich mailto:[EMAIL PROTECTED] or (last choice)
mailto:[EMAIL PROTECTED]
http://scifi.squawk.com/njs.html -- Stop by and Light Up The World!
