[opennms-discuss] Re: W32.Klez.E removal tools

[Tarus B. <ta...@so...>]

mschwankl said:

> Mcafee give you the W32.Klez.E removal tools
> W32.Klez.E is a  dangerous virus that spread through email.
>
> For more information,please visit http://www.Mcafee.com

Since I am tired of receiving these, I thought I would post this to the list.

The OpenNMS mailing list is served using mailman on Linux. Every step is
taking to reduce the chance that viruses will be spread from our system.

However, certain viruses *randomly* grab the "From" line when propagating,
so if you are reading OpenNMS discussion lists on an infected machine, the
virus may propagate in a way that makes it look like it came from our
system. It didn't.

Here's the explanation from the Symantic web site:

Because this worm does use a randomly chosen address that it finds on an
infected computer as the "From:" address, numerous cases have been
reported in which users of uninfected computers receive complaints that
they have sent an infected message to someone else.

For example, Linda Anderson is using a computer that is infected with
W32.Klez.E@mm; Linda is not using a antivirus program or does not have
current virus definitions. When W32.Klez.E@mm performs its emailing
routine, it finds the email address of Harold Logan. It inserts Harold's
email address into the "From:" line of an infected email that it then
sends to Janet Bishop. Janet then contacts Harold and complains that he
sent her infected email, but when Harold scans his computer, Norton
AntiVirus does not find anything--as would be expected--because his
computer is not infected.

I hope this clears up the matter.

-T

-- 
Tarus Balog
Consultant
Sortova Consulting Group, http://www.sortova.com
+1-919-696-7625
ta...@so...