Re: [vox] ucd virus question

[Peter Jay Salzman <p@MAPSdirac.org>]

begin Mark K. Kim <markslist@cbreak.org> 
> It sounds like:
> 
>    1. a virus was sent out
>    2. some virus checker caught the virus
>    3. they *deleted* the virus
>    4. they delivered the email to you less the virus
 
yeah, that's what i meant to write (but obviously didn't).

> It sounds like a reasonable action.  I wouldn't want them blocking
> any e-mail that is potentially legit, but wouldn't want virus traveling to
> my system, no matter what virus or how it may or may not have been sent...
 
i guess we differ -- it's my understanding that the klez virus sends
itself out.   for that reason alone, i wouldn't want it.

but to be honest, i wouldn't want _any_ email that had a virus attached
to it.  not because i use windows (i don't).  i just don't even want to
see it.  i've *never* received a legit email that had a virus scrubbed
from it, and i'm doubtful i ever will.

i wish they let us choose "action to take upon catching a email with
virus" in sisweb....   :(

pete

 
 
> On Mon, 10 Feb 2003, Peter Jay Salzman wrote:
> 
> > to people who may know ucd policy:
> >
> >
> > every so often, i still get klez viruses to my lifshitz.ucdavis.edu
> > account.  along with the message, there's an attachment that says:
> >
> >
> >    ------------------  Virus Warning Message (on tripoli)
> >
> >    Found virus WORM_KLEZ.H in file width.bat
> >    The file is deleted.
> >
> >    UCD Virus scanner found virus.  Contact ithelp@ucdavis.edu with
> >    questions.
> >
> >    ---------------------------------------------------------
> >
> >
> > in other words:
> >
> > 1. a virus was sent out
> > 2. some virus checker caught the virus
> > 3. they delivered the email to me anyhow
> >
> > it's my understanding that klez sends itself out without piggybacking on
> > a "real" email.  in other words, something other than the user triggers
> > the virus to be sent.
> >
> > does anybody know why ucd insists on sending out the email after the
> > virus is caught?
> >
> > also, does ucd make any attempt to look at connection logs and track
> > down systems that send this stuff out?
> >
> > pete
> >
> > --
> > First they ignore you, then they laugh at you, then they fight you,
> > then you win. -- Gandhi, being prophetic about Linux.
> >
> > Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D
> > _______________________________________________
> > vox mailing list
> > vox@lists.lugod.org
> > http://lists.lugod.org/mailman/listinfo/vox
> >
> 
> -- 
> Mark K. Kim
> http://www.cbreak.org/
> PGP key available upon request.
> 
> _______________________________________________
> vox mailing list
> vox@lists.lugod.org
> http://lists.lugod.org/mailman/listinfo/vox

-- 
First they ignore you, then they laugh at you, then they fight you,
then you win. -- Gandhi, being prophetic about Linux.

Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D
_______________________________________________
vox mailing list
vox@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox