Re: virus detectors addins?

[Tomaz Borstnar <tomaz.borstnar@over.net>]

At 22:32 4.5.00, Matthew Hawkins wrote the following message:
On 2000-05-04 21:26:15 +0200, Tomaz Borstnar wrote:
 >> See http://www.wolfenet.com/~jhardin/procmail-security.html for procmail
 >> based solution that works well - stops spreading of other viruses and 
trojans..

 >I second this.
 >My only problem with such filtering is that depending on the
 >implementation, it'll have to be updated for each new exploit :-(

Nope, I didn't have to do anything to disarm this ILOVEYOU menace. I disarm 
ANY .vbs and most other executable content.

I had educate my users about this feature, because this script also renames 
any file which can be executed so nothing gets executed either by mistake 
or automatically - practical problem with this approach is that your users 
lose the convenience to open stuff just by clicking, but it looks like this 
is way too dangerous lately.

Tomaz
----
Tomaz Borstnar <tomaz.borstnar@over.net>
"Love is the answer to the final question you ask" - Unknown