[Resolved] Outgoing SPAM

bperfect

Hello !

I just hate spam, but some of my user on the server is continueously sending spam using some php script. Now there are many scripts on the server, how to find that guy and the script causing all this. It is very important, since that is making me go nuts.

An early reply shall help a bit in creating a spam free world
Thank you

Systems Config : Xeon, Redhat 9, Php 4.3.3

lobobr

You should begin by searching for files that contain the string "mail(" on your server.

Hope it helps

bperfect

when i try to grep -r mail( /home/httpd/vhosts/* it gives an error "(" is not valid without this, it gives a lot of files, i am really in a fix.

pyro

Try this:

grep -r 'mail(' /home/httpd/vhosts

bperfect

I have found an interesting script.. what does this exactly mean, have a look...

<?php
} else {Deleted !!);}}
}
?>

bad76

Hi,
you got it, I think.

All this get from a list the subject and the body of email.
- change the subject with random char.
- get a random mailer (great list, however!).
- set the user part of any email as sender.
- send all this to 10 different email address.

And why do all this if you are not a spammer? I think this script is guilty.

see you.

(ps. delete some line from prew message, is a bit too... and even for some lamer guy who can copy it... 😉 )

bperfect

I pasted it because i found it, and thought to share a bit, now i have deleted the few lines making it difficult to use.

Thanks 🙂

Regards
Bperfect

pyro

Out of curiosity, did the grep statment work that I posted? It was kind of a shot in the dark, as I've never used that particular flavor of regex before.

bperfect

yes, it did !. That made catch spammer 🙂

Thanks everyone, you guys are wonderful.
Have a nice week
Regards

pyro

Cool beans... 😃

jayant

Originally posted by bperfect
yes, it did !. That made catch spammer 🙂

Thanks everyone, you guys are wonderful.
Have a nice week
Regards

cool. now lets mark this post resolved.
(read my sig. for details)