Re: [newbie] Virus problems
Anne Wilson wrote: Increasingly, members of this list are being accused of sending virused emails. I know that some of you have no choice but to use windows for part of your life, but PLEASE, if you do, check that you are clean. Our addresses are being picked up from somewhere, and more and more clues point to someone who uses linux mailing lists. The warning I received this morning was from [EMAIL PROTECTED] It is not necessary to use Windows to have your address appear in the From header of a virus - all that is necessary is for your email address to be in the address book of someone who has an infected computer. Same goes for spam - I've had mails ostensibly from myself offering the usual viagra, organ enlargement etc. Sir Robin -- Man will occasionally stumble over the truth, but most of the time he will pick himself up and continue on. - Winston Churchill Robin Turner IDMYO Bilkent Univeritesi Ankara 06533 Turkey www.bilkent.edu.tr/~robin Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus problems
On Wednesday 04 February 2004 13:32, robin wrote: Anne Wilson wrote: Increasingly, members of this list are being accused of sending virused emails. I know that some of you have no choice but to use windows for part of your life, but PLEASE, if you do, check that you are clean. Our addresses are being picked up from somewhere, and more and more clues point to someone who uses linux mailing lists. The warning I received this morning was from [EMAIL PROTECTED] It is not necessary to use Windows to have your address appear in the From header of a virus - all that is necessary is for your email address to be in the address book of someone who has an infected computer. Same goes for spam - I've had mails ostensibly from myself offering the usual viagra, organ enlargement etc. Sir Robin Agreed, Robin, but I ask myself who would have an addressbook with the names of a number of people from a linux mailing list? It could be coincidence, but working on the principle that two is coincidence, three, just possibly, more than that - probably not Anne -- Registered Linux User No.293302 Have you visited http://twiki.mdklinuxfaq.org yet? Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus problems
robin wrote: Anne Wilson wrote: Increasingly, members of this list are being accused of sending virused emails. I know that some of you have no choice but to use windows for part of your life, but PLEASE, if you do, check that you are clean. Our addresses are being picked up from somewhere, and more and more clues point to someone who uses linux mailing lists. The warning I received this morning was from [EMAIL PROTECTED] It is not necessary to use Windows to have your address appear in the From header of a virus - all that is necessary is for your email address to be in the address book of someone who has an infected computer. Same goes for spam - I've had mails ostensibly from myself offering the usual viagra, organ enlargement etc. Sir Robin You too. John -- John Richard Smith [EMAIL PROTECTED] Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus problems
On Wed, 2004-02-04 at 07:07, John Richard Smith wrote: robin wrote: Anne Wilson wrote: Increasingly, members of this list are being accused of sending virused emails. I know that some of you have no choice but to use windows for part of your life, but PLEASE, if you do, check that you are clean. Our addresses are being picked up from somewhere, and more and more clues point to someone who uses linux mailing lists. The warning I received this morning was from [EMAIL PROTECTED] It is not necessary to use Windows to have your address appear in the From header of a virus - all that is necessary is for your email address to be in the address book of someone who has an infected computer. Same goes for spam - I've had mails ostensibly from myself offering the usual viagra, organ enlargement etc. Sir Robin You too. John Im starting to get them too. smitty Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus problems
On Wed, 4 Feb 2004 13:52:58 +, Anne Wilson wrote On Wednesday 04 February 2004 13:32, robin wrote: Anne Wilson wrote: Increasingly, members of this list are being accused of sending virused emails. I know that some of you have no choice but to use windows for part of your life, but PLEASE, if you do, check that you are clean. Our addresses are being picked up from somewhere, and more and more clues point to someone who uses linux mailing lists. The warning I received this morning was from [EMAIL PROTECTED] It is not necessary to use Windows to have your address appear in the From header of a virus - all that is necessary is for your email address to be in the address book of someone who has an infected computer. Same goes for spam - I've had mails ostensibly from myself offering the usual viagra, organ enlargement etc. Sir Robin Agreed, Robin, but I ask myself who would have an addressbook with the names of a number of people from a linux mailing list? It could be coincidence, but working on the principle that two is coincidence, three, just possibly, more than that - probably not From my experience, this virus isn't just scanning address books and flailing away. It's mixing and matching so if it finds [EMAIL PROTECTED] and [EMAIL PROTECTED] in an infected computer, it's going to fake [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] and [EMAIL PROTECTED] mandrake.com. Given the odds (and a huge address book), sooner or later some of these composed addresses are going to start resulting in real addresses. At least that's how it appears to me, judging from all the failed attempts in my mail server logs. Besides, anyone using outlook with the 'copy all emails to addresse book' setting will quickly get a collection of linux mailing list addresses the first time they receive a forwarded email from a linux friend (like a tech tip, or a buy-sell note). Some people like it that way, other's don't even realize they're filling up their address book with strangers. So it's very easy for a non-linux person to load up their address book with linux mailing list addresses. The thing that bothers me most about this virus is: - Not the virus itself. It was quickly added to my filters, never to be seen again. - Not the faked addresses. They are rejected (NOT BOUNCED) by my mail server and never returned. No, the thing that's most annoying is the continual stream of bounce replies from mail servers that feel the best solution to an unknown user is to send it back (to the faked sender) in full with comments. This is not the correct way to deal with mail, particularily when it's virus initiated. Scott -- Nothing goes to waste when Little Fish are near! (http://www.littlefish.ca) Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus problems
Scott said: From my experience, this virus isn't just scanning address books and flailing away. It's mixing and matching so if it finds [EMAIL PROTECTED] and [EMAIL PROTECTED] in an infected computer, it's going to fake [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] and [EMAIL PROTECTED] mandrake.com. Given the odds (and a huge address book), sooner or later some of these composed addresses are going to start resulting in real addresses. At least that's how it appears to me, judging from all the failed attempts in my mail server logs. Yes, that's exactly what is happening I manage a couple of domains and I'm getting mail adressed to people who do not and have never existed. The thing that bothers me most about this virus is: - Not the virus itself. It was quickly added to my filters, never to be seen again. - Not the faked addresses. They are rejected (NOT BOUNCED) by my mail server and never returned. No, the thing that's most annoying is the continual stream of bounce replies from mail servers that feel the best solution to an unknown user is to send it back (to the faked sender) in full with comments. This is not the correct way to deal with mail, particularily when it's virus initiated. Exactly my sentiments, I'm getting so many bounce messages now it's getting beyond a joke. ___ BT Yahoo! Broadband - Free modem offer, sign up online today and save £80 http://btyahoo.yahoo.co.uk Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [newbie] Virus problems
The problem we have though is that if the person was daft enough to have opened up the email attachment and been infected, they won't have a clue about how to fix it, or even if they are infected. I can't believe a regular list user to be that naive. -Original Message- From: Lexx /Sigil [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 04, 2004 4:53 PM To: [EMAIL PROTECTED] Subject: Re: [newbie] Virus problems Scott said: From my experience, this virus isn't just scanning address books and flailing away. It's mixing and matching so if it finds [EMAIL PROTECTED] and [EMAIL PROTECTED] in an infected computer, it's going to fake [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] and [EMAIL PROTECTED] mandrake.com. Given the odds (and a huge address book), sooner or later some of these composed addresses are going to start resulting in real addresses. At least that's how it appears to me, judging from all the failed attempts in my mail server logs. Yes, that's exactly what is happening I manage a couple of domains and I'm getting mail adressed to people who do not and have never existed. The thing that bothers me most about this virus is: - Not the virus itself. It was quickly added to my filters, never to be seen again. - Not the faked addresses. They are rejected (NOT BOUNCED) by my mail server and never returned. No, the thing that's most annoying is the continual stream of bounce replies from mail servers that feel the best solution to an unknown user is to send it back (to the faked sender) in full with comments. This is not the correct way to deal with mail, particularily when it's virus initiated. Exactly my sentiments, I'm getting so many bounce messages now it's getting beyond a joke. ___ BT Yahoo! Broadband - Free modem offer, sign up online today and save £80 http://btyahoo.yahoo.co.uk -+-+-+-+-+-+-+- Business Computer Projects - Disclaimer -+-+-+-+-+-+-+- This message, and any associated attachment is confidential. If you have received it in error, please delete it from your system, do not use or disclose the information in any way, and notify either Tony S. Sykes or the postmaster mailto:[EMAIL PROTECTED] immediately. The contents of this message may contain personal views which are not necessarily the views of Business Computer Projects Ltd., unless specifically stated. Whilst every effort has been made to ensure that emails and their attachments are virus free, it is the responsibility of the recipient(s) to verify the integrity of such emails. Business Computer Projects Ltd BCP House 151 Charles Street Stockport Cheshire SK1 3JY Tel: +44 (0)161 355-3000 Fax: +44 (0)161 355-3001 Web: http://www.bcpsoftware.com http://www.bcpsoftware.com/ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus problems
On Wed, 4 Feb 2004 17:05:31 - Tony S. Sykes disseminated the following: I can't believe a regular list user to be that naive. That's the point, it may not be a list member. Remember, 'six degrees of separation' ;-) -- JoeHill Registered Linux user #282046 Homepage: www.orderinchaos.org +++ 12:11:31 up 23:56, 5 users, load average: 0.31, 0.14, 0.06 +++ Linux 2.4.22-21mdk i686 +++ If those in charge of our society - politicians, corporate executives, and owners of press and television - can dominate our ideas, they will be secure in their power. They will not need soldiers patrolling the streets. We will control ourselves.-- Howard Zinn Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [newbie] Virus problems
lol, that's what I meant, I can't believe that it is a regular list member. Tony. -Original Message- From: JoeHill [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 04, 2004 5:13 PM To: [EMAIL PROTECTED] Subject: Re: [newbie] Virus problems On Wed, 4 Feb 2004 17:05:31 - Tony S. Sykes disseminated the following: I can't believe a regular list user to be that naive. That's the point, it may not be a list member. Remember, 'six degrees of separation' ;-) -- JoeHill Registered Linux user #282046 Homepage: www.orderinchaos.org +++ 12:11:31 up 23:56, 5 users, load average: 0.31, 0.14, 0.06 +++ Linux 2.4.22-21mdk i686 +++ If those in charge of our society - politicians, corporate executives, and owners of press and television - can dominate our ideas, they will be secure in their power. They will not need soldiers patrolling the streets. We will control ourselves.-- Howard Zinn -+-+-+-+-+-+-+- Business Computer Projects - Disclaimer -+-+-+-+-+-+-+- This message, and any associated attachment is confidential. If you have received it in error, please delete it from your system, do not use or disclose the information in any way, and notify either Tony S. Sykes or the postmaster mailto:[EMAIL PROTECTED] immediately. The contents of this message may contain personal views which are not necessarily the views of Business Computer Projects Ltd., unless specifically stated. Whilst every effort has been made to ensure that emails and their attachments are virus free, it is the responsibility of the recipient(s) to verify the integrity of such emails. Business Computer Projects Ltd BCP House 151 Charles Street Stockport Cheshire SK1 3JY Tel: +44 (0)161 355-3000 Fax: +44 (0)161 355-3001 Web: http://www.bcpsoftware.com http://www.bcpsoftware.com/ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [newbie] Virus problems
On Wed, 4 Feb 2004 17:05:31 -, Tony S. Sykes wrote The problem we have though is that if the person was daft enough to have opened up the email attachment and been infected, they won't have a clue about how to fix it, or even if they are infected. I can't believe a regular list user to be that naive. Well, you really can't fault the end user. It doesn't take a degree in computer literacy to switch the on button and send mail. Nor should it. Those days are gone and with good riddance. Eventually the software will become smart enough to keep up with daftest of users. Although, I don't think my parents will ever stop believing everything they read on the net... But the bounced viruses is not just an end user or an MS problem. This is a Linux problem as well. I haven't kept track, but most of the 'undeliverable' bounced emails I get from other mail servers are coming from other Linux mail servers (or at least non-MS servers). I myself would be one of those servers if I hadn't recently come to terms with the problem. It doesn't matter that this time it's the result of an MS virus. I've found that spammers are using this same technique more and more (which is what prompted me to change prior to this). It's far easier to get your mail server config wrong, than it is to get a working mail server up and running. After all, bouncing an unknown user doesn't seem like a bad thing, until you get 60 bounces from xyz.com claiming you sent them an email to an unknown user. I don't know what the solution is, but there's an awful lot of bandwidth going to waste on bounced email these days. and talk about bounced email ;) -Original Message- From: Lexx /Sigil [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 04, 2004 4:53 PM To: [EMAIL PROTECTED] Subject: Re: [newbie] Virus problems Scott said: From my experience, this virus isn't just scanning address books and flailing away. It's mixing and matching so if it finds [EMAIL PROTECTED] and [EMAIL PROTECTED] in an infected computer, it's going to fake [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] and [EMAIL PROTECTED] mandrake.com. Given the odds (and a huge address book), sooner or later some of these composed addresses are going to start resulting in real addresses. At least that's how it appears to me, judging from all the failed attempts in my mail server logs. Yes, that's exactly what is happening I manage a couple of domains and I'm getting mail adressed to people who do not and have never existed. The thing that bothers me most about this virus is: - Not the virus itself. It was quickly added to my filters, never to be seen again. - Not the faked addresses. They are rejected (NOT BOUNCED) by my mail server and never returned. No, the thing that's most annoying is the continual stream of bounce replies from mail servers that feel the best solution to an unknown user is to send it back (to the faked sender) in full with comments. This is not the correct way to deal with mail, particularily when it's virus initiated. Exactly my sentiments, I'm getting so many bounce messages now it's getting beyond a joke. Scott -- Nothing goes to waste when Little Fish are near! (http://www.littlefish.ca) Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus problems
On Wednesday 04 February 2004 12:41 pm, Littlefish Operator wrote: On Wed, 4 Feb 2004 17:05:31 -, Tony S. Sykes wrote Well, you really can't fault the end user. It doesn't take a degree in computer literacy to switch the on button and send mail. Nor should it. Those days are gone and with good riddance. Eventually the software will become smart enough to keep up with daftest of users. Only two things are infinite, the universe and human stupidity, and I'm not sure about the former. - Albert Einstein -- Bryan Phinney Software Test Engineer Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus problems
I haven´t been in Windows for a while and if i was i never logined to my this yahoo account that is dedicated to mailing list such as this (actually right now only this mailing list). The only email address i have in the address book is of this mailing list and it is not on the server but just on my PC. However i just received two emails about returned emails form me with virus attachments. I don´t know what can be understood from this. Regards, Ramin On February 4, 2004 04:36 am, Anne Wilson wrote: Increasingly, members of this list are being accused of sending virused emails. I know that some of you have no choice but to use windows for part of your life, but PLEASE, if you do, check that you are clean. Our addresses are being picked up from somewhere, and more and more clues point to someone who uses linux mailing lists. The warning I received this morning was from [EMAIL PROTECTED] Anne -- Linux user #310496 Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus problems
On Wednesday 04 February 2004 19:27, Ramin wrote: I haven´t been in Windows for a while and if i was i never logined to my this yahoo account that is dedicated to mailing list such as this (actually right now only this mailing list). The only email address i have in the address book is of this mailing list and it is not on the server but just on my PC. However i just received two emails about returned emails form me with virus attachments. I don´t know what can be understood from this. Regards, Ramin Ramin, quoted from the expert list conversation on this point: quote Scott said: From my experience, this virus isn't just scanning address books and flailing away. It's mixing and matching so if it finds [EMAIL PROTECTED] and [EMAIL PROTECTED] in an infected computer, it's going to fake [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] and [EMAIL PROTECTED] mandrake.com. Given the odds (and a huge address book), sooner or later some of these composed addresses are going to start resulting in real addresses. At least that's how it appears to me, judging from all the failed attempts in my mail server logs. Yes, that's exactly what is happening I manage a couple of domains and I'm getting mail adressed to people who do not and have never existed. /quote Anne -- Registered Linux User No.293302 Have you visited http://twiki.mdklinuxfaq.org yet? Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus problems
On Wednesday 04 February 2004 12:12 pm, JoeHill wrote: On Wed, 4 Feb 2004 17:05:31 - Tony S. Sykes disseminated the following: I can't believe a regular list user to be that naive. That's the point, it may not be a list member. Remember, 'six degrees of separation' ;-) If I understand this correctly, you're saying that this mess isn't Bill Gates' fault, Kevin Bacon is the real culprit. Chris Fox is starting to get to you, isn't he? -- cmg Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus problems
Carroll Grigsby wrote: On Wednesday 04 February 2004 12:12 pm, JoeHill wrote: On Wed, 4 Feb 2004 17:05:31 - Tony S. Sykes disseminated the following: I can't believe a regular list user to be that naive. That's the point, it may not be a list member. Remember, 'six degrees of separation' ;-) If I understand this correctly, you're saying that this mess isn't Bill Gates' fault, Kevin Bacon is the real culprit. Chris Fox is starting to get to you, isn't he? -- cmg Linux variant of MyDoom http://www.livejournal.com/users/solri/186769.html (just kidding) Sir Robin -- Man will occasionally stumble over the truth, but most of the time he will pick himself up and continue on. - Winston Churchill Robin Turner IDMYO Bilkent Univeritesi Ankara 06533 Turkey www.bilkent.edu.tr/~robin Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus problems
On Wednesday 04 February 2004 09:18 pm, robin wrote: Carroll Grigsby wrote: On Wednesday 04 February 2004 12:12 pm, JoeHill wrote: On Wed, 4 Feb 2004 17:05:31 - Tony S. Sykes disseminated the following: I can't believe a regular list user to be that naive. That's the point, it may not be a list member. Remember, 'six degrees of separation' ;-) If I understand this correctly, you're saying that this mess isn't Bill Gates' fault, Kevin Bacon is the real culprit. Chris Fox is starting to get to you, isn't he? -- cmg Linux variant of MyDoom http://www.livejournal.com/users/solri/186769.html (just kidding) Sir Robin Now that's funny. -- cmg Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
