[63028] in North American Network Operators' Group
Re: Nothing like viruses with bugs in them (Swen)
daemon@ATHENA.MIT.EDU (Gregory (Grisha) Trubetskoy)
Thu Sep 25 11:33:06 2003
Date: Thu, 25 Sep 2003 11:32:08 -0400 (EDT)
From: "Gregory (Grisha) Trubetskoy" <grisha@ispol.com>
To: "Mr. James W. Laferriere" <babydr@baby-dragons.com>
Cc: nanog@merit.edu
In-Reply-To: <Pine.LNX.4.58.0309191305230.14904@filesrv1.baby-dragons.com>
Errors-To: owner-nanog-outgoing@merit.edu
On Fri, 19 Sep 2003, Mr. James W. Laferriere wrote:
>
> Hello All ,
>
> Is there an example of a procmail filter for this bugger ?
This might be a little late, but here is one that works 100% for me:
# this is a virus. base64 encoded "ram cannot be run in DOS mo"
:0 B:
* cmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v
/some/folder
"/some/folder" can of course be /dev/null, in which case you can take out
the trailing colon above since there is no need for locking.
Grisha
