It's not from Stephane's computer (even if he were using a Windows machine). From Symantec's website:
"The subject line, message bodies, and attachment file names are random. The From address is randomly-chosen from email addresses that the worm finds on the infected computer." I've never gotten an e-mail with the Klez virus from the person who was listed in the From address. Very likely it's from someone else on the list who is infected. Since Fatcity doesn't pass on the original headers, Bruce is the only one who will be able to determine the original source. Stephane Faroult wrote: > > Martin Kendall wrote: > > > > My Norton Antivirus reports that Stephane's email re. "How to pass > > value from SQL*Plus to Unix scripts?" contains the W32.Klez.H@mm virus > > in an "item" called stars-bkgrd. > > > > Anyone else had same alert ? > > > > Martin > > > > ------------------------------------------------------------------------ > > Name: smime.p7s > > smime.p7s Type: PKCS7 Signature (application/x-pkcs7-signature) > > Encoding: 7bit > > Sorry for the trouble, folks, but I have trouble understanding. When I > am answering the list, it is either from a Linux machine (and netscape) > - not infected by W32.Klez.H@mm according to the Symantec site - or from > a mail web interface. I sent the e-mail mentioned above on October 22nd > or October 23rd (two answers to the same question) more than one month > ago, and from Linux. I hope that somebody is not harvesting the list ... > If anybody has any hint about how to check for viruses on a Linux > machine, BTW ... > > -- > Regards, > > Stephane Faroult > Oriole Software > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.com > -- > Author: Stephane Faroult > INET: [EMAIL PROTECTED] > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > San Diego, California -- Mailing list and web hosting services > --------------------------------------------------------------------- > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Dennis M. Heisler INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
