Here is the shell script that I wrote this morning to check everyone on my
system's mailbox to find any instances of this new virus. Feel free to use
it anyone.
________________________________
for user_name in `cat /etc/passwd | cut -d: -f1 | sort`; do
cat /usr/spool/mail/$user_name | grep 'Subject: ILOVEYOU' >
/tmp/first.check
if [ -s /tmp/first.check ]
then
echo "POSSIBLE ILOVEYOU MAIL: $user_name"
fi
cat /usr/spool/mail/$user_name | grep 'Subject: fwd: Joke' >
/tmp/first.check
if [ -s /tmp/first.check ]
then
echo "POSSIBLE JOKE VARIANT MAIL: $user_name"
fi
cat /usr/spool/mail/$user_name | grep 'Susitikim shi vakara kavos' >
/tmp/first.check
if [ -s /tmp/first.check ]
then
echo "POSSIBLE VARIANT C MAIL: $user_name"
fi
cat /usr/spool/mail/$user_name | grep 'Mothers Day Order Confirmation'
> /tmp/first.check
if [ -s /tmp/first.check ]
then
echo "POSSIBLE VARIANT D MAIL: $user_name"
fi
done
______________________________
On Fri, 5 May 2000, Origami Dreams wrote:
> On Thu, 4 May 2000, Gate wrote:
>
> > Anyone have something I can filter this thing out with?
>
> Add this recipe to your procmail filters:
>
> :0:
> * ^Subject:.ILOVEYOU
> killfiled
>
> It'll catch everything with ILOVEYOU in the message (including the one you
> sent me). I send mail to a folder for later review, you may wish to send
> it directly to /dev/null
>
>
> Rob
> --
> +-----------------------------------------------
> | "I became myself through the instrumentality of the links and my
> | relationships with others. I am formed by interaction with others.
> They create me as I create them. These relationships and |
> interactions serve to shape the patterns of my heart and mind." |
> -------------------------------------------+
> http://iabervon.mit.edu/~bratling/
> [EMAIL PROTECTED]
>
>
>
> --
> To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
> as the Subject.
>
>
Jake McHenry
[EMAIL PROTECTED]
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
