[aclug-L] Re: Klez, Fetchmail and Sendmail

["Koji Hayakawa" <sylf@xxxxxxxxx>]

Damn, Outlook is one mailer app in Windows I can also type Japanese to write
home too...  Thank god for anti-virus proggies that works for now.

-----Original Message-----
From: discussion-bounce@xxxxxxxxx [mailto:discussion-bounce@xxxxxxxxx]On
Behalf Of Chris Owen
Sent: Friday, May 17, 2002 10:53 AM
To: discussion@xxxxxxxxx
Subject: [aclug-L] Re: Klez, Fetchmail and Sendmail



On Fri, 17 May 2002, keith frost wrote:

> if a person is running say, outlook at home, and that person's ISP is
> running a mailserver with linux.  then that person gets a virus.  the
> linux mail server will very happily send all the emails just like it
> is supposed to.  this does not mean it is infected.
>
> yes, some sort of filter/viruswall would be helpful, but this does not
> mean that this machine is infected.

Exactly.  And with Klez it goes further than that.  Klez take advantage of
an specific exploit that is unique to Outlook.  In fact almost all of
these do. Klez for instance uses an exploit that doesn't even require the
receiver to open the email in order to be infected.  That is just wrong.
Avoiding Outlook will solve 90% of these things since they mostly live off
of Outlook specific exploits.

Avoiding ISPs that don't do virus scanning will avoid 100% ;-]

Chris

> --- David Carmichael <dec2955@xxxxxxxxxx> wrote:
> >
> > OK all I just received the 'Virus' that had started
> > showing up yesterday
> > with the header as if from:
> > Fetchmail (  fetchmail-announce@xxxxxxxxxxx )
> >    and
> > Sendmail
> > !!!!!!!!!!!
> >
> > Unless I am mistaken both of these are Linux based
> > email programs!!
> >
> > Boy am I glad that I am running 'Norton'!
> >
> > --David
> >
> >
> >
> >
> > -- This is the discussion@xxxxxxxxx list.  To
> > unsubscribe,
> > visit
> > http://www.complete.org/cgi-bin/listargate-aclug.cgi
> >
>
>
> =====
> phrostie
> Oh I have slipped the surly bonds of DOS
> and danced the skies on Linux silvered wings.
> http://pfrostie.freeservers.com/cad-tastrafy/
> http://www.freelists.org/webpage/cad-linux
>
> __________________________________________________
> Do You Yahoo!?
> LAUNCH - Your Yahoo! Music Experience
> http://launch.yahoo.com
> -- This is the discussion@xxxxxxxxx list.  To unsubscribe,
> visit http://www.complete.org/cgi-bin/listargate-aclug.cgi
>

--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Chris Owen             ~  Hubris Communications  ~  Lottery (noun):
PO Box 1969            ~  120 S Market Suite 101 ~     A stupidity tax
Garden City, KS 67846  ~  Wichita, KS 67202      ~
Voice: (620) 275-1900  ~  Voice: (316) 858-3000  ~     www.hubris.net
Fax:   (620) 275-0313  ~  Fax:   (316) 858-3001  ~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


-- This is the discussion@xxxxxxxxx list.  To unsubscribe,
visit http://www.complete.org/cgi-bin/listargate-aclug.cgi

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.362 / Virus Database: 199 - Release Date: 5/7/2002

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.362 / Virus Database: 199 - Release Date: 5/7/2002

-- This is the discussion@xxxxxxxxx list.  To unsubscribe,
visit http://www.complete.org/cgi-bin/listargate-aclug.cgi