Re: Is my linux box an email zombie? Mydoom?
From: James T (turajb_at__NOSPAM_hoflink.com)
Date: 02/29/04
- Next message: Carlos Moreno: "Re: NSA enhancing Linux security?"
- Previous message: Chandler Bing: "Re: contacting webserver from local network"
- In reply to: Geoffrey: "Is my linux box an email zombie? Mydoom?"
- Next in thread: John Thompson: "Re: Is my linux box an email zombie? Mydoom?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 29 Feb 2004 18:47:22 GMT
On Sun, 29 Feb 2004 10:32:46 -0800, Geoffrey wrote:
> My linux server runs Mandrake 9.1. I use mozilla mail GUI. and have
> noticed several returned as undeliverable email messages for emails
> that I never sent. It looks like my server is sending out spam to
> other computers trying to sell viagra and other RXs, because I am
> getting failed delivery notices from other email servers saying
> foo@foo.com is not a valid email address, and the body has viagra/RX
> promotion info in it.
>
> Subject: Delivery failure
> from: Mailer-Daemon@Yahoo.com
> To: my email address
> Body:
> The following emails could not be delivered
>
> could not deliver email to joe@yahoo.com - account does not exist...
>
> I have made the mistake of running my gui and hence my Mozilla mail
> client as root - I know this is a no no. I will not do this anymore
> now that I know there are actually virus and worms targeting linux.
>
> If I have ran my gui as root can I get an email virus via email by
> opening an email and not opening an attachment?
>
> Do I assue that I have the MYDOOM virus, or could this be that these
> emails are mydoom emails from others fishing for something, or
> nuisance emails from other email zombies?
>
> How do I verify that my server is sending emails ( sendmail logs?) and
> that I have a virus/worm?
>
> Is the best thing for me to do to reinstall?
> If I reinstall and run GUI as non-root, and do not open attachments,
> is there anything else that I should do to avoid this problem in the
> furture.
>
> Thanks.
I get lots of those emails myself on both my PC's Windows [:-(] &
Fedora [:-)] in each of my email accounts. This is usually virus/spam
trickery to get you to open the attachments & infect your computer. You
should look at the header of those emails & I believe you will find they
did not originate from your box. Your box should be relatively secured
since attachments do not automatically open/run in Linux. I don't think a
reinstall is necessary because of this fact. I would still also recommend
that you do a fast review of your logs; but shouldn't be a problem.
James
- Next message: Carlos Moreno: "Re: NSA enhancing Linux security?"
- Previous message: Chandler Bing: "Re: contacting webserver from local network"
- In reply to: Geoffrey: "Is my linux box an email zombie? Mydoom?"
- Next in thread: John Thompson: "Re: Is my linux box an email zombie? Mydoom?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
