This morning's Trojan

[Randal, Phil]

Hi folks,
 
The one to catch has a subject line of "Statement of fees 2008/09"
 
SA rule to get it is
 
header   MY_TROJAN8     Subject =~ /^Statement of fees 2008\/09$/
describe MY_TROJAN8     Fees trojan
score    MY_TROJAN8     12

Samples submitted to the usual places.
 
Phil
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080822/bf9a107e/attachment.html