[cobalt-users] W32.Dumaru.M@mm Procmail Rule

["Santiago Montalvan" <smontalvan@xxxxxxxxxxxxxxxxx>]

I added the following rule to my procmailrc file:

# W32.Dumaru.M@mm
:0 HBfw
* ^Subject: Use this patch immediately !*
* ^Content-Type:.*
* ( |   | file| file)name=.*\.Patch.exe
| formail -b -f -A "$AV_header Dumaru (W32.Dumaru.M@mm) Worm detected."
        :0 a:
        ${VIRUSDUMP}

Is this rule fine or did I make a mistake?

Thanks!

Santiago.