Re: [Fwd: VIRUS (Worm.Bagle.A) IN MAIL TO YOU (from <owner-openldap-softwar e@OpenLDAP.org>)]

[L Nehring <nehring@newparticles.com>]

Worm.Bagel.A (also known by a few other names) is known to fake the 
sending address.  See: 
http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.a@mm.html

People running antivirus software on their email system should include 
this virus in the list of worms/viruses that should not have an 
automatic notification sent.   For amavisd, check the 
"$viruses_that_fake_send_re" variable in amavisd.conf.   It seems to be 
becoming commonplace for email borne viruses to have fake addresses.  To 
send notification to the supposed sender has become a source of 
automated spam.

r,
Lance
http://www.newparticles.com/

Douglas Furlong wrote:

> Good morning All.
>
> Just to let people know, an email was sent to the list just now, with
> the Bagle.A virus/worm attached.
>
> I have included the apparent sender just incase he needs to update his
> AV software.
>
>  
<snip>

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature