Will MailScanner pickup the W32/Bagle-Q virus?

[Peter Bonivart]

Holger Gebhard wrote:
> rawbody  BagleQ_Found /(?:\<object\s{1,3}style\=\Sdisplay\:none.{1,5}
> data\=.http\:\/\/([1-9]+[\.|\:|\/])+\w+\.php)/i
> describe BagleQ_Found Worm Bagle-Q found
> score    BagleQ_Found 10.0

Thank you, I will try it tomorrow when I'm back at work.

--
/Peter Bonivart

--Unix lovers do it in the Sun

Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14,
SpamAssassin 2.63 + DCC 1.2.30, ClamAV 0.67 + GMP 4.1.2, MailStats 0.25