[Tutor] parsing email

[Michael Janssen]

On Wed, 28 Jan 2004, Mike Hansen wrote:

> Getting attacked by MyDoom at our site, our NT Admin asked if we could
> write a script to delete messages. In the time it would have taken us to
> write the script and have him install the appropriate language(Perl
> and/or Python),  he would have had it cleaned up already. Anyway, I
> thought I'd try to write a script for when this happens in the
> future.(Another virus, another mess)
>
> Is there a method of the email parser that can retrieve the subject? Is
> there a dictionary that has a key with the subject? Is using the email
> parser the best way to do this?

>From where do you want to delete the mails? When they have made it into
the System-Inbox (Or how it's named on NT. The place from where the user
get mails via POP or IMAP)?

The first task is to get a *single* mail out of a mailbox (or split it
into several mails). Then you might look out for subjects or want might
be good enough as a distinction between virus <-> legitmate mail.

When you want to work on your System-Inboxes - are they in plain text or
binary?


Michael