hey chad these files are in ALL of our directories. From video drivers, to fonts... -----Original Message----- From: Schneider, Chad M. [mailto:CMSchneider@xxxxxxxxx] Sent: Monday, October 14, 2002 11:28 AM To: 'thin@xxxxxxxxxxxxx' Subject: [THIN] Re: nirit ...a virus? If you are using the SMTP component of IIS, there may be a significant number of .EML files under \Inetpub\Mailroot\Drop. Don't panic - the SMTP component generates these files. The name of these would appear to be based on a GUID (or similar) followed by the machine name. eg. 00b255356230291MYBOX.eml where MYBOX is the name of the machine. You can verify the nature of these files by opening them with Notepad or similar. The file contents should be similar (with extra headers and so forth) to messages the component is sending. The moral of the story is, if you have a heap of .EML files under your IIS web, you might like to check them before you delete them. -----Original Message----- From: Rob Beekmans [mailto:robbeekmans@xxxxxxxxxxxxx] Sent: Monday, October 14, 2002 1:07 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: nirit ...a virus? Me neither, can you specify what kind of extension it has? Did you create a virus????...LOL Grx rob -----Oorspronkelijk bericht----- Van: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] Namens Schneider, Chad M. Verzonden: maandag 14 oktober 2002 19:39 Aan: 'thin@xxxxxxxxxxxxx' Onderwerp: [THIN] Re: nirit ...a virus? Never heard of it, and can find no information regarding it. -----Original Message----- From: Mario Villarreal [mailto:MarioV@xxxxxxxxx] Sent: Monday, October 14, 2002 12:36 PM To: 'thin@xxxxxxxxxxxxx' Subject: [THIN] nirit ...a virus? Hi We just found over 3000 files named nirit on our Citrix server. It appears to be an outllook or email message. Has anyone seen or heard of a virus similar to this. Please help Mario ********************************************** This weeks sponsor 99Point9.com 99Point9 helps solve your unresolved technical server-based questions, issues and incidents. http://www.99point9.com *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm ********************************************** This weeks sponsor 99Point9.com 99Point9 helps solve your unresolved technical server-based questions, issues and incidents. http://www.99point9.com *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm ********************************************** This weeks sponsor 99Point9.com 99Point9 helps solve your unresolved technical server-based questions, issues and incidents. http://www.99point9.com *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm ********************************************** This weeks sponsor 99Point9.com 99Point9 helps solve your unresolved technical server-based questions, issues and incidents. http://www.99point9.com *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm ********************************************** This weeks sponsor 99Point9.com 99Point9 helps solve your unresolved technical server-based questions, issues and incidents. http://www.99point9.com *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm