[Esd-l] Klez@ worm/virus

[Andy Feldt]

John,

You wrote:

> I keep seeing these worms being announced, and I keep thinking about
> my default-secure stance, and I keep thinking that I'm going to drop
> *.exe into the recommended poison list on principle.
> 
> How badly would this annoy people?
> 
> I suppose I could maintain two lists, one with the .exe filenames from
> the various announcements, and a shorter one with just *.exe -
> any comments?

I have been using *.exe in my poison list for some time.  Less than
1% of what it quarantines is legitimate, so I have felt it to be
well worth the occasional effort to extract a valid message for
someone.

---
Andy Feldt
Senior System Support Programmer
Adjunct Assistant Professor
Department of Physics and Astronomy
The University of Oklahoma