| 1.1.3.2.2.1. If Yes are there any unique identifiers that can |
| 1.1.3.2.2.1.3. Is it spreading via direct port 25 to internet, |
 | 1.1.3.2.2.1.3.1. Apply a port 25 block at gateway firewall and |
| 1.1.3.2.2.1.1. Is it spreading via a unique file name? |
| 1.1.3.2.2.1.2. Is it spreading with a specific file extension that |