[TriLUG] Spam e-mails with only an RTF attachment

[Tarus Balog]

Gang:

Hey, I've been getting tons of e-mails lately that consist of a random subject string and just an attachment with a filename that ends in .rtf.

My guess is that this is some sort of trojan aimed at Windows users, but I was wondering if anyone had a .procmail recipe to detect an e-mail like this (no text and just an .rtf file as an attachment) that they could share.

-T
_______________________________________________________________________
Tarus Balog, OpenNMS Maintainer             Main:   +1 919 533 0160
The OpenNMS Group, Inc.                     Fax:    +1 503 961 7746
Email: tarus at opennms.org                    URL: http://www.opennms.org
PGP Key Fingerprint: 8945 8521 9771 FEC9 5481  512B FECA 11D2 FD82 B45C