RE: Sircam Virus and AS/400

I know someone who checked their email, which had a virus attached, clicked
on the attachment a few times.  Didn't think anything happened until someone
complained about the website.  Yes, drives were mapped to the ifs folder
that contained the web files and all jpg's were replaced with copies of the
virus.

Nothing like a backup to save the day.

Phil

> -----Original Message-----
> From: owner-midrange-l@midrange.com
> [mailto:owner-midrange-l@midrange.com]On Behalf Of Walden H. Leverich
> Sent: Thursday, July 26, 2001 5:07 PM
> To: 'MIDRANGE-L@midrange.com'
> Subject: RE: Sircam Virus and AS/400
>
>
> Jim,
>
> I understand that completely. I'm pointing it out more for those that
> believe "because I use my as/400 for e-mail I'm impervious to
> viruses." I've
> actually heard people say "You use Exchange? Don't you get viruses? We use
> the native SMTP server in OS/400, we can't get them." Exchange
> and OS/400's
> SMTP are just the transports, they'll move whatever you ask them to move.
>
> Anyone using their AS/400 as their mail server should be running an
> anti-virus SMTP gateway between it and the real world. Actually,
> that's not
> just advice for the AS/400 world, _ANYONE_ running a mail server should be
> running anti-virus software, it's just that the only anti-virus options
> AS/400 people have are SMTP gateway options. I've not seen any anti-virus
> software for the as/400 smtp server yet.
>
> -Walden
>
> -----Original Message-----
> From: JIM LANGSTON [mailto:JLANGSTON@celsinc.com]
> Sent: Thursday, July 26, 2001 4:17 PM
> To: MIDRANGE-L@midrange.com
> Subject: RE: Sircam Virus and AS/400
>
>
> Walden,
>
> OS/400 just had the SMTP server running that the machine with the
> virus used
> to e-mail it out.
>
> So, if your WinXX machine has a virus, and it sends this virus through
> outlook to your ISP e-mail server which is, say, a linux box, the Received
> line would be on the Linux Box.
>
> The machine that actually has the virus is the 192.168.1.73 machine, which
> is the received FROM machine.
>
> Regards,
>
> Jim Langston
>
> -----Original Message-----
> From: owner-midrange-l@midrange.com
> [mailto:owner-midrange-l@midrange.com]On Behalf Of Walden H. Leverich
> Sent: Thursday, July 26, 2001 12:01 PM
> To: 'midrange-l@midrange.com'
> Subject: Sircam Virus and AS/400
>
>
> Names changed to protect the [not so] innocent, but otherwise the exact
> headers that hit my machine last night. Note the second "Received:" line.
>
> -Walden
>
> -------------- Header Start --------------
> Received: from xxxxxx.xxxxx_WEB (40324257.ptr.xxx.xxxxxxxx.net
> [xx.50.xx.87]) by neptune.techsoftwareinc.com with SMTP
> (Microsoft Exchange
> Internet Mail Service Version 5.5.2653.13)
>       id PJ6L44VL; Wed, 25 Jul 2001 20:35:40 -0400
> Received: from dxx-norxxxxx([192.168.1.73]) by xxxxxx.xxxxx_WEB
> (IBM OS/400
> SMTP V04R05M00) with TCP; Wed, 25 Jul 2001 20:35:30 -0400
> From: "Dxx Norxxxxx"<Dxx.Norxxxxx@xxxxx.COM>
> To: WaldenL@techsoftinc.com
> Subject: Vendor File 2001
> date: Wed, 25 Jul 2001 20:39:20 -0400
> MIME-Version: 1.0
> X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
> X-Mailer: Microsoft Outlook Express 5.50.4133.2400
> Content-Type: multipart/mixed;
> boundary="----4D0AC425_Outlook_Express_message_boundary"
> Content-Disposition: Multipart message
> -------------- Header End --------------
>
>
>
> ------------
> Walden H Leverich III
> President
> Tech Software
> (516)627-3800 x11
> WaldenL@TechSoftInc.com
> http://www.TechSoftInc.com
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
>


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---