Re: Linux and Virii

mylar <[email protected]> Sun, 08 Feb 2004 22:56:23 -0500
Newsgroups gmane.linux.redhat.ppp
Organization MicroService Co.
Message-ID <[email protected]>
Are these rejected/returned mails showing attchments such as 
application.exe, document.zip, etc. ?? My guess it has something to do 
with the MyDOOm virus that is infecting Windows boxes. I suppose it reads 
users address lists and propagates emails using those as the "from" 
addresses. In other words you get the rejected/return email because 
somebody's infected windows box sent out an forged email with YOU'RE 
address as the From address.

  When they get virus scanned and rejected you get the return. I've been 
getting tons of them from people I don;t know and have never sent mail to. 
The same thing happened with SoBIg worm during the summer.

No, you're Linux box is not infected. MyDOOM or whatever the latest worm 
of the week is infects Windows boxes.

Mylar


On Fri, 6 Feb 2004 17:09:21 -0800, Mark Ness <[email protected]> wrote:

> This may be OT, but I guess it could be concidered in the realm of ppp.
>
> I have a stripped down RH9.0 for for internet connection, and a Mandrake
> 9 connected by LAN. Dial-up ISP with dynamic IP, and realitively short
> on-line time per connection (by choice, with no dedicated line, can't
> tie up the phone).
>
> I've been hit with several infected emails in the last week or so.
> Recieving these virus' is not the problem, getting "returned" or 
> "refused"
> mail from people and places I HAVE NOT SENT MAIL TO is the problem.
>
> A friend of mine has just finished setting up Squirrel mail on his Linux
> system. He's been hosting my "domain" mail for some time now, and I have
> had no problems. It's just since I started using his Squirrel that I
> started getting these returned mails. Is it possible that Squirrel mail
> has some vulnerability to infections? Or has someone just finally gotten
> around to "stealing" my address (it's one of many addresses, but it is
> my "main" address).
>
> FYI I have never put my Windoze on line, and I never check suspect mail
> (that Linux can't display properly) with Windoze. If it won't display on
> Linux, I delete them. If I don't know the sender, I usually go ahead and
> check them out then delete them.
>
> Has anybody ever heard of Linux being infected, at least to the extent
> of someons home dir?
>
> One more point. Alot of the mail I get is from friends who for some
> reason or another never cut and paste messages, but just forward them
> and forward them etc until the header is actually larger than the file
> itself.
>



-- 
Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/