On Tue, Dec 2, 2008 at 18:20, Karsten Bräckelmann wrote: > This is not spam but malware. Got a virus scanner? Yes. But when your scanners do not detect it yet, alternatives are needed. > sa-update generally is *not* meant for "signature style updates" once an > hour like that. Noted. I just needed a quick fix to get rid of them and the manual rules worked like a charm. Richard