:0 * Content-Type:.*multipart { :0 B * name=.*\.(exe|bat|pif|scr) /home/verbit/KLEZ } # Вам послана виртуальная открытка :0 B * (postcards.rin.ru) /home/verbit/SPAM-bad ##################### Virus Klez /dev/null :0 * Worm Klez /home/verbit/KLEZ ############################# cut here ##################### :0 * (Windows-1251|Windows-1252|windows-1251) | recode -wk - >> /home/verbit/SPAM :0 * (PORNO|^X-Server: Advanced Direct Remailer|^X-Mailer: Mail \ Bomber|blowout|Mortgage|GreatDeals|^X-Apparently-To: \ cebep-owner@yahoogroups.com|^To: undisclosed-recipients:|^To: \ Recipient List Suppressed:) /home/verbit/SPAM-bad :0 * (^Content-Type: text/html|^Content-Type: \ multipart|^Content-Type: multipart/related|Undisclosed\.Recipients|\ Windows-1251|Windows-1252|E-Biz|^X-EM-Version|@yahoo.com|^To: \ client|charset=\"us-ascii\";format=flowed|^X-AntiAbuse|Mail \ delivery failed|^X-Mailer: Microsoft Outlook Express|dating) /home/verbit/SPAM-bad :0 * (Microsoft Outlook|^X-Originating-IP: unknown via proxy) /home/verbit/SPAM :0 * () /var/spool/mail/verbit
Misha Verbitsky, 25 June 2003