[THIN] Re: nirit ...a virus?
- From: "Clark Turner" <CTurner@xxxxxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Mon, 14 Oct 2002 12:50:24 -0700
Call Trend and talk to them right away. They have a special dept for this
reason. I have used this before and they jumped into action providing a
solution in about 30 minutes. I tried to look for the contact info for the
person I talked to last time but have lost it.
CT
**********************************
Clark Turner
Blue Cross Blue Shield of AZ
IS Dept. 602-864-5656
cturner@xxxxxxxxxxxxxxx
***********************************
>>> MarioV@xxxxxxxxx 10/14/2002 12:01:49 PM >>>
i just did a house call from the trend site and it came back with no virus's
found. Strange thing is that our apps in the sys win32 directory are all
coming up with the same size. it doesn't look good. I have the latest
virus pattern files and nothing is detected.....
day light come and me want to go home ....
-----Original Message-----
From: Schneider, Chad M. [mailto:CMSchneider@xxxxxxxxx]
Sent: Monday, October 14, 2002 11:34 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: nirit ...a virus?
Check on this virus.....
PE_NIMDA.A-O
-----Original Message-----
From: Schneider, Chad M. [mailto:CMSchneider@xxxxxxxxx]
Sent: Monday, October 14, 2002 1:28 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: nirit ...a virus?
If you are using the SMTP
component of IIS, there may be a significant number of .EML files under
\Inetpub\Mailroot\Drop. Don't panic - the SMTP component generates these
files. The name of these would appear to be based on a GUID (or similar)
followed by the machine name. eg. 00b255356230291MYBOX.eml where MYBOX is
the name of the machine. You can verify the nature of these files by
opening them with Notepad or similar. The file contents should be similar
(with extra headers and so forth) to messages the component is sending. The
moral of the story is, if you have a heap of .EML files under your IIS web,
you might like to check them before you delete them.
-----Original Message-----
From: Rob Beekmans [mailto:robbeekmans@xxxxxxxxxxxxx]
Sent: Monday, October 14, 2002 1:07 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: nirit ...a virus?
Me neither, can you specify what kind of extension it has?
Did you create a virus????...LOL
Grx
rob
-----Oorspronkelijk bericht-----
Van: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] Namens
Schneider, Chad M.
Verzonden: maandag 14 oktober 2002 19:39
Aan: 'thin@xxxxxxxxxxxxx'
Onderwerp: [THIN] Re: nirit ...a virus?
Never heard of it, and can find no information regarding it.
-----Original Message-----
From: Mario Villarreal [mailto:MarioV@xxxxxxxxx]
Sent: Monday, October 14, 2002 12:36 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] nirit ...a virus?
Hi
We just found over 3000 files named nirit on our Citrix server. It
appears to be an outllook or email message. Has anyone seen or heard of
a virus similar to this. Please help Mario
**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents. http://www.99point9.com
***********************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents. http://www.99point9.com
***********************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents.
http://www.99point9.com
***********************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents.
http://www.99point9.com
***********************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents.
http://www.99point9.com
***********************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents.
http://www.99point9.com
***********************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
-- Attached file included as plaintext by Ecartis --
-- File: InterScan_Disclaimer.txt
The information in this E-mail message is confidential and for
the sole use of the intended recipient. If you are not the
intended recipient, you are hereby notified that any
dissemination, distribution, copying or use of this information
is strictly prohibited. If you received this communication in
error, please notify the sender immediately. Blue Cross and
Blue Shield of Arizona, Inc. and its subsidiaries and affiliates
are not responsible for errors, omissions or personal comments
in this E-mail message.
**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents.
http://www.99point9.com
***********************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
Other related posts:
