[Esd-l] W32/Yaha.g@MM

Scott Taylor scott at dctchambers.com
Mon Jun 24 07:18:01 PDT 2002


At 06:33 PM 23/06/2002, Paul Ferwerda wrote:
>Anyone have a rule for the W32/Yaha.g at MM virus?  I just received two and 
>wanted to update the sanitizer's filters to handle it but don't consider 
>myself expert enough to do so yet.

[snip from Symantec Virus Encyclopedia]
The attachment will have a .bat, .pif or .scr file extension.
[/snip]

This file types exist in the poison file, shouldn't be a problem if you set 
up the sanitizer while following John's most excellent instructions.

ftp://ftp.rubyriver.com/pub/jhardin/antispam/procmail-security.html



More information about the esd-l mailing list