Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

An Applescript to fight latest Blaster garbage Apps
I've been hit hard with e-mails from the latest Blaster worm, so I've created an AppleScript (blasterblaster) that works with Mail to alleviate the problem. This AppleScript takes a somewhat heavy-handed approach -- it simply checks the body of the message for references to Windows executables -- .exe, .scr, .pif and .bat. If found, it flags the message as junk and puts it in the Junk folder. Obviously, if someone sends you a legitimate Windows executable, it too will end up in the Junk folder if you use this script.

Why use an Applescript instead of simply checking "Message Content" in a Mail Rule? Because Message Content doesn't seem to work. To use the script in Mail, create a new Rule for "Every Message" and in "Perform the following actions" tell it to "Run AppleScript" and "Choose" the AppleScript file. The script is available at http://burtcom.homeip.net/blasterblaster.scpt

[robg adds: A previous hint explained how to block other non-attachment worm emails based on message content...]
    •    
  • Currently 1.00 / 5
  • 1
  • 2
  • 3
  • 4
  • 5
  (1 vote cast)
 
[3,329 views]  

An Applescript to fight latest Blaster garbage | 4 comments | Create New Account
Click here to return to the 'An Applescript to fight latest Blaster garbage' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
An Applescript to fight latest Blaster garbage
Authored by: terceiro on Sep 23, '03 10:52:42AM

Oh, this is very, very good. I'd been trying to filter this stuff out by message content, but it just wasn't cutting the mustard, as this hint states. But I'm obviously not bright enough to fix it myself. Thank heavens for this! Woohoo!



[ Reply to This | # ]
An Applescript to fight latest Blaster garbage
Authored by: Deut3221 on Sep 23, '03 12:44:40PM

Better: try MailSmith + SpamSieve 2.0.
Result: 100% effective!



[ Reply to This | # ]
An Applescript to fight latest Blaster garbage
Authored by: dennisj on Sep 23, '03 03:54:50PM
This script looks useful, but it will not compile in Applescript. Can it be reposted with corrections?

Some gremlin characters around 'class ktxt'
return Çclass ktxtÈ of styledRecord

Doesn't like 'is junk mail'
set is junk mail of CurrentMessage to true

Doesn't like "Junk"
set mailbox of CurrentMessage to mailbox "Junk"

---
Dennis
dennisj@mac.com

[ Reply to This | # ]

Did you mean Sobig?
Authored by: tetsuo_ on Sep 23, '03 04:06:01PM
Are you sure, you're talking about Blaster (and not Sobig)? I'm only asking because Blaster is not a mail worm – see here! :^)

[ Reply to This | # ]