[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] RaQ2 - CERT virus rule for sendmail - question



Diana Brake wrote:
> 
> and it worked great. Messages sent with the exact words "ILOVEYOU" in the
> subject were refused. "I love you" was not. "Iloveyou" was refused also but

www.symantec.com:
                     VBS.LoveLetter.A (UPDATE)

                     The Symantec AntiVirus Research Center currently detects
the
                     following variants of VBS.LoveLetter.A:

                     VBS.LoveLetter.A (LoveLetter)
                     VBS.LoveLetter.B (Lithuanian)
                     VBS.LoveLetter.C (VeryFunny)
                     VBS.LoveLetter.D (BugFix)
                     VBS.LoveLetter.E (MothersDay)
                     VBS.LoveLetter.F (VirusWarning)
                     VBS.LoveLetter.G (Virus ALERT!!!)
                     VBS.LoveLetter.H (No Comments)
                     VBS.LoveLetter.I (Important! Read carefully!!)

Why not just refuse anything containing VBscript?
Is there *any* reason for somebody to send it?