Mailinglist Archive: opensuse (5100 mails)
| < Previous | Next > |
Re: [SLE] Virus Scanner
- From: Anders Johansson <andjoh@xxxxxxxxxx>
- Date: Mon, 7 Jun 2004 04:45:55 +0200
- Message-id: <200406070445.55306.andjoh@xxxxxxxxxx>
On Monday 07 June 2004 04.39, Mas Hangga wrote:
> Hehehe.....on Saturday and Sunday, I was at home and my office computer is
> shutdown, but there is a notification today from other mail server, that my
> computer send viruses on Saturday, june 5th 2004.
<snip>
> Received: from unknown (HELO mail01.sg.schneider-electric.com)
<snip rest of virus complaint>
It's difficult to say with certainty exactly what happened here, but there is
one scenario that I can easily see as likely here:
Some virus was sent by someone to schneider-electric, with a forged sender
address, to make it look like you. This is very very common with viruses. And
most virus scanners are brain dead. They believe the from-address 100%. This
would mean that the virus most likely came from someone who has your address
in his/her address book, whose machine is infected
In any event, the virus it complained about was an .exe. A windows virus. Why
did you ever doubt it.
Trust me on this one, if there ever is a linux virus as severe as you
described, Microsoft will take out full page, front page ads in every major
newspaper in the world. You will *not* be able to miss it
So far it hasn't happened. Odds are it never will
> Hehehe.....on Saturday and Sunday, I was at home and my office computer is
> shutdown, but there is a notification today from other mail server, that my
> computer send viruses on Saturday, june 5th 2004.
<snip>
> Received: from unknown (HELO mail01.sg.schneider-electric.com)
<snip rest of virus complaint>
It's difficult to say with certainty exactly what happened here, but there is
one scenario that I can easily see as likely here:
Some virus was sent by someone to schneider-electric, with a forged sender
address, to make it look like you. This is very very common with viruses. And
most virus scanners are brain dead. They believe the from-address 100%. This
would mean that the virus most likely came from someone who has your address
in his/her address book, whose machine is infected
In any event, the virus it complained about was an .exe. A windows virus. Why
did you ever doubt it.
Trust me on this one, if there ever is a linux virus as severe as you
described, Microsoft will take out full page, front page ads in every major
newspaper in the world. You will *not* be able to miss it
So far it hasn't happened. Odds are it never will
| < Previous | Next > |