Yet Another antiVirus Recipe is a procmail that
helps to filter out a lot of the most common
e-mail worms. It detects worms with base-64
signatures (such as Klez, Hybris, and BugBear),
HTML IFRAME exploits, CLSID hidden extension
exploits, -XML code base exploits, executable
extensions (bat, pif, vbs, vba, scr, lnk, com,
and exe), and macros for doc, dot, xls, and xla
files. It also detects most Nigerian scam
e-mails.
