Fwd: FW: New Virus

Kevin wrote:
k> I think it's a great idea. Should work pretty well for this case. I
k> have tried applying this to my Ximian Evolution client (1.2.4), but it
k> seems to slip through regardless. I've never had much luck searching
k> within message bodies in evo. Header triggers work fine.
k>
k> Anyone able to make this work in Evolution? If so, what version?
k>
k> I created a filter that says:
k>
k> If any Criteria are met...
k> Regex Match -> Msg Body -> ^UEsDBAoAAA
k> Regex Match -> Msg Body -> ^TVqQAAMA
k> ...Move to a folder
k> ...Stop processing
k>
k> No worky.

Victor Replies:
vo> For what it's worth, my filter in Mozilla did not attempt
vo> to anchor it at the beginning of the line. I just filtered
vo> for UEsDBAoAAA and TVqQAAMA, and I got not false positives
vo> except of course for messages on this thread.
vo> - Vic