To McAfee, re: antivirus autoresponse / 2004-05-31

Quoting postmaster@mcafee.com who wrote on Wed, May 19, 2004 at 01:12:32PM +0000:

> This is an automated response. PLEASE DO NOT REPLY TO THIS MESSAGE. McAfee.com
> detected the virus W32/Netsky.p@MM in a message to with subject
> Mail Delivery (failure oilchange@cybermedia.com) from and it was
> Deleted.

I am astounded by the fact that even McAfee, who are in the antivirus
business long enough to know that a lot of virusses fake the From: address,
still send these replies on virusses where it is a known fact.

Even your own virus database knows this. Quoting
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=101119

"Note: Receiving an email alert stating that the virus came from your
email address is not an indication that you are infected as the virus
often forges the from address."

"The worm sends mails using SMTP. Email sent has the following
characteristics:

From: (forged address taken from infected system)"

It's 2004. Update your mail virus scanner to not send mail on recieving a
virus that uses a fake From:. Start delivering updated mail virus scanners
to your customers today.

I am awaiting apologies to the Internet community for continuing to
assist in sending unwanted and unnecessary e-mail to people not sending the
virusses.

Koos van den Hout

Note: I sent this reply to McAfee on 25 May, no response at this moment.