develooper Front page | perl.beginners | Postings from May 2002

Re: (OT) Klez virus

From:
Jason Williams
Date:
May 2, 2002 08:23
Subject:
Re: (OT) Klez virus
Message ID:
01b901c1f1ed$c85dacd0$c600000a@swordfish
I'm currently stopping it with a procmail recipe that is a common part of
the executables.

:0B:
*(135AAItEjhyJRI8ci0SOGIlEjxiLRI4UiUSPFItEjhCJRI8Qi0SODIlEjwyLRI4IiUSPCItE)
/var/mail/procmail/virus

Could probably write something that looks for the same string in the body of
the message and reject or delete on that.

Jason

----- Original Message -----
From: "Michael D. Risser" <michael@visionpro.com>
To: <beginners@perl.org>
Sent: Thursday, May 02, 2002 11:09 AM
Subject: Re: (OT) Klez virus


Nice idea, and it would work, but I don't see it as being very practicle for
most applications. The problem arises from rejecting email from potential
customers, requested information, mailing lists, etc.

If this was intended as a joke, my apologies, my humor engine has not yet
recieved sufficient caffine to operate properly ;-)

On Thursday 02 May 2002 07:47 am, Nikola Janceski typed:
> Yeah.
>
> Algorithm:
> Check mail if PGP encrypted.
> Check PGP signature against your key ring.
> Remove mail if not signed with a key from your ring.
>
> IMHO, I don't think virus writers know my passphrase to encrypt thier
virus
> for outgoing mail.
>
> 8^P
>
> > -----Original Message-----
> > From: Michael D. Risser [mailto:michael@visionpro.com]
> > Sent: Thursday, May 02, 2002 10:38 AM
> > To: beginners@perl.org
> > Subject: Re: (OT) Klez virus
> >
> >
> > Maybe this isn't so off topic...
> > Can anyone think of a way to write a virus scanner in Perl?
> > We could stop it
> > at the Unix server :-)
> > Has anyone else already done this? Have examples?
> >
> > --
> > Michael D. Risser
> > Software Engineer
> >
> > rm -rf /bin/laden
>
> --------------------------------------------------------------------------
-
>- --------------------
> The views and opinions expressed in this email message are the sender's
> own, and do not necessarily represent the views and opinions of Summit
> Systems Inc.

--
Michael D. Risser
Software Engineer

rm -rf /bin/laden

--
To unsubscribe, e-mail: beginners-unsubscribe@perl.org
For additional commands, e-mail: beginners-help@perl.org




nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About