[THIN] Re: nirit ...a virus?

  • From: "Rob Beekmans" <robbeekmans@xxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Mon, 14 Oct 2002 21:07:14 +0200

Same here we block almost anything...better safe than sorry

-----Oorspronkelijk bericht-----
Van: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] Namens
Greg Reese
Verzonden: maandag 14 oktober 2002 20:53
Aan: thin@xxxxxxxxxxxxx
Onderwerp: [THIN] Re: nirit ...a virus?



I do.  Not too many complaints.  Mostly from people that were upset they
= couldn't receive a joke someone was forwarding.

Greg

-----Original Message-----
From: Michael Earley [mailto:Michael.Earley@xxxxxxxxxxxxxx]
Sent: Monday, October 14, 2002 2:42 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: nirit ...a virus?



Do any of you block .eml attachments on your mail server, or is that
considered over the top?

Regards,
--=20
Michael Earley
Citrix, Windows, Exchange Administrator
Ext: 244 ; Mobile: 0400 508 040
--------------------------------------------
Queensland Studies Authority
--------------------------------------------
Level 7/295 Ann Street, Brisbane, QLD Australia 4000
Ph: (+617) 3864 0299   Fax:(+617) 3221 2553
E-mail: Michael.Earley@xxxxxxxxxxxxxx
-------------------------------------------------------------------
You cannot achieve what you have not first imagined ...
-------------------------------------------------------------------
Many that live deserve death. And some that die deserve=20 life. Can you
give it to them? Then do not be too eager to deal out death in
judgement. For even the very wise
cannot see all ends.    -Gandalf, Fellowship of the Ring
-------------------------------------------------------------------


-----Original Message-----
From: Schneider, Chad M. [mailto:CMSchneider@xxxxxxxxx]
Sent: Tuesday, 15 October 2002 4:34 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: nirit ...a virus?



Check on this virus.....

PE_NIMDA.A-O

-----Original Message-----
From: Schneider, Chad M. [mailto:CMSchneider@xxxxxxxxx]
Sent: Monday, October 14, 2002 1:28 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: nirit ...a virus?



If you are using the SMTP
component of IIS, there may be a significant number of .EML files under
\Inetpub\Mailroot\Drop.  Don't panic - the SMTP component generates =
these files.  The name of these would appear to be based on a GUID (or =
similar)
followed by the machine name.  eg. 00b255356230291MYBOX.eml where MYBOX
= is the name of the machine.  You can verify the nature of these files
by opening them with Notepad or similar.  The file contents should be =
similar (with extra headers and so forth) to messages the component is
sending.  = The moral of the story is, if you have a heap of .EML files
under your IIS = web, you might like to check them before you delete
them.

-----Original Message-----
From: Rob Beekmans [mailto:robbeekmans@xxxxxxxxxxxxx]
Sent: Monday, October 14, 2002 1:07 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: nirit ...a virus?



Me neither, can you specify what kind of extension it has?

Did you create a virus????...LOL

Grx
rob

-----Oorspronkelijk bericht-----
Van: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] Namens
Schneider, Chad M.
Verzonden: maandag 14 oktober 2002 19:39
Aan: 'thin@xxxxxxxxxxxxx'
Onderwerp: [THIN] Re: nirit ...a virus?



Never heard of it, and can find no information regarding it.

-----Original Message-----
From: Mario Villarreal [mailto:MarioV@xxxxxxxxx]
Sent: Monday, October 14, 2002 12:36 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] nirit ...a virus?


Hi
We just found over 3000 files named nirit on our Citrix server.  It
appears to be an outllook or email message.  Has anyone seen or heard of
a virus similar to this. Please help Mario


**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents. http://www.99point9.com
***********************************************

For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm

**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents. http://www.99point9.com
***********************************************

For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm


**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents. http://www.99point9.com
***********************************************

For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm

**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents. http://www.99point9.com
***********************************************

For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm

**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents. http://www.99point9.com
***********************************************

For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm
**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents. http://www.99point9.com
***********************************************

For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm
**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents. http://www.99point9.com
***********************************************

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm


**********************************************
This weeks sponsor 99Point9.com
99Point9 helps solve your unresolved technical
server-based questions, issues and incidents.
http://www.99point9.com
***********************************************

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm

Other related posts: