#!/usr/bin/expect
#

spawn /usr/bin/telnet $argv 25

expect "220"
send "HELO youdonotreallycare\r"

expect "250"
send "MAIL FROM: <attackedserver@localhost>\r"

expect "250"
send "RCPT TO: <administrator>\r"

expect "250"
send "DATA\r"

expect "354"
send " Hello, your server appears to be infected with some kind
of a worm, code red or NIMBDA, it attacked my server.

Please update your server. http://windowsupdate.microsoft.com
most of these worms fixes have been available for more than 
six months.

I have not included my email address as I do not like recieved
infected attachments.  Thanks!

from a concerned Internet user.
.\r"

expect "250"
send "QUIT\r"