From: steve-simon@ntlworld.nospam.com
To: 9fans@cse.psu.edu
Subject: [9fans] pipeto for mydoom virus
Date: Tue, 27 Jan 2004 16:01:31 +0000 [thread overview]
Message-ID: <a19dc3ace9e8da18ae5f5aa054addfec@snellwilcox.com> (raw)
[-- Attachment #1: Type: text/plain, Size: 277 bytes --]
Hi,
A pipeto clause to strip the mydoom virus.
Add rot13 to /386/bin (attached) and the below to your pipeto
if ( test -f $D/2/body && ! ~ `{unzip -sc < $D/2/body | rot13 | grep 'Version\\Explorer'} '' ){
log virus $RECIP From `{cat $D/replyto}
exit 0
}
-Steve
[-- Attachment #2: rot13.c --]
[-- Type: text/plain, Size: 431 bytes --]
#include <u.h>
#include <ctype.h>
#include <libc.h>
#include <bio.h>
Biobuf bin, bout;
int main()
{
long got;
char buf[1024], *p;
Binit(&bin, 0, OREAD);
Binit(&bout, 1, OWRITE);
while((got = Bread(&bin, buf, sizeof(buf))) > 0){
for (p = buf; p < buf + got; p++)
if (isalpha(*p))
if (tolower(*p) <= 'm')
*p += 13;
else
*p -= 13;
Bwrite(&bout, buf, got);
}
Bterm(&bout);
}
next reply other threads:[~2004-01-27 16:01 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-01-27 16:01 steve-simon [this message]
2004-01-27 17:49 ` Matthias Teege
2004-01-27 19:56 ` Richard Miller
2004-01-27 19:59 ` Scott Schwartz
2004-01-27 22:52 ` a
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=a19dc3ace9e8da18ae5f5aa054addfec@snellwilcox.com \
--to=steve-simon@ntlworld.nospam.com \
--cc=9fans@cse.psu.edu \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).