loren wilton voxhqbdearthlinknet untested try uri executable_website exescrpifi loren original message dave koontz sent saturday february 23 2008 652 subject please help rule still getting storm worm messages caught even sane security clamav thought id write rule score url dot exe scr pif extension however rule working someone help advise wrong want pickup http https extensions body dangerous_url http1200exescrpifi describe dangerous_url dangerous url score dangerous_url 75 thanks advance thu 07 aug 2008 153710 0800 please help rule