How about an email filter ? (Score 1)

I use the exim MTA, and it has excellent filtering capabilities. I have trapped several melissa and happy99 messages this way. Since the Worm.Explore virus is an email attachment, it must have a mail header with information about the attachment. For example it might have a header like:

Content-description: ... from file 'zipped-files.exe'

I could search the message body for the reported body text, but this is much more time consuming. I would be easy if I could just look at a certain header.