OE6 rule to stop downloading Gibe-F virus from server

  • Thread starter Thread starter Dan Williams
  • Start date Start date
D

Dan Williams

Has anyone managed to come up with a suitable Outlook Express 6 message rule
that will prevent me having to download all the copies of the Gibe-F viurs?
I'm receiving about 150 a day at the moment. I've done a virus checker on my
own machine and am clean.

So far i've come up with this:-

Apply this rule after the message arrives
Where the message body contains 'Cumulative Patch'
Delete it from the server

After looking on Google, it appears that the 'Delete it from the server'
rule can only test information in the message header (ie. FROM, TO, CC,
Subject & Message size), so therefore my rule doesn't work as the email has
to be downloaded first before the rule can test any message or attachment
rules.

Looking on http://www.sophos.com/virusinfo/analyses/w32gibef.html i can get
info on what types of words are common for this virus, but can anyone
suggest a rule that will stop just the virus and not any valid emails that
might contain some of the words in the list.

Many thanks

Dan Williams.
 
Check out an excellent program called mailwasher. There's
a functional free version.

http://www.mailwasher.net/

It allows you to preview you mail and delete or bounce it
at the server, before you download it. It does this by
allowing you to see the headers, and it can filter out the
virus emails.. mailwasher is now getting almost all of
them, hands off, for me at home. I do not
suggest 'bouncing' the emails back tho.. it'll just cause
more problems...

-----Original Message-----
Has anyone managed to come up with a suitable Outlook Express 6 message rule
that will prevent me having to download all the copies of the Gibe-F viurs?
I'm receiving about 150 a day at the moment. I've done a virus checker on my
own machine and am clean.

So far i've come up with this:-

Apply this rule after the message arrives
Where the message body contains 'Cumulative Patch'
Delete it from the server

After looking on Google, it appears that the 'Delete it from the server'
rule can only test information in the message header (ie. FROM, TO, CC,
Subject & Message size), so therefore my rule doesn't work as the email has
to be downloaded first before the rule can test any message or attachment
rules.

Looking on
Click to expand...
http://www.sophos.com/virusinfo/analyses/w32gibef.html i
can get
 
In
Dan Williams said:
Has anyone managed to come up with a suitable Outlook Express 6
message rule that will prevent me having to download all the copies
of the Gibe-F viurs? I'm receiving about 150 a day at the moment.
I've done a virus checker on my own machine and am clean.

So far i've come up with this:-

Apply this rule after the message arrives
Where the message body contains 'Cumulative Patch'
Delete it from the server

After looking on Google, it appears that the 'Delete it from the
server' rule can only test information in the message header (ie.
FROM, TO, CC, Subject & Message size), so therefore my rule doesn't
work as the email has to be downloaded first before the rule can test
any message or attachment rules.

Looking on http://www.sophos.com/virusinfo/analyses/w32gibef.html i
can get info on what types of words are common for this virus, but
can anyone suggest a rule that will stop just the virus and not any
valid emails that might contain some of the words in the list.

Many thanks

Dan Williams.
Click to expand...

I unchecked "show preview pain" and you can just delete the header. After
that, you can synchronize hour inbox.
 
I've been using mailwasher for the last three days now.
Brilliant!!!! No more hassle with the duff emails. Just
delete them staight away.


Kevin
 
Dan,

I seem to have put a stop to the downloading of them - I hope <g> - by setting up an email rule to delete,from the server,any email over 100KB in size.

John Clifford Hole [MVP] of Enfield Middlesex
 
Back
Top