So we got an alert notification from McAfee about a new worm that is apparently overwhelming email systems - see McAfee KB KB69857. I can't find a whole lot more information about this virus than that though. We've pushed out the latest McAfee DAT file, but I'd feel better if I could go the extra mile and block the virus directly in Exchange, either by blocking the subject line, or the link, or whatever. But I'm not sure how to do this. What are you all doing to prepare for VBMania? Thanks!

We blocked it by subject line in Axway EMF (Email Firewall). I imagine you could do something similar in your spam scanning software (Trend ScanMail, etc). The subject being used is: Here you have according to ComputerWorld (http://www.computerworld.com/s/article/9184559/_Here_you_have_e_mail_worm_spreads_quickly?taxonomyId=18&pageNumber=2). To be sure, this could catch a few legitimate emails, but the subject text isn't something someone would typically use in my opinion...the wording is a bit odd. Kezzran

You could also try using a Transport Rule to accomplish this: http://msexchangeteam.com/archive/2006/12/12/431879.aspx Kezzran

I'll give it a try - thanks!