Re: ifs files with .eml extension

[<shannonjano@xxxxxxxxxxxxxxx>]

Jim,

Our AS/400 was infected with Nimda about a year ago via a user's PC that had
a mapped drive.  ARGH!   Those .eml files in every directory are likely
virus/nimda files.  Attempt to open it, from a PC with Norton Anti-virus on
it, and it should alert you if it's is a virus.  Don't worry...to the best
of my knowledge, you will not spread it further in this manner (as long as
your Norton virus definitions are up to date).

Shannon O'Donnell


----- Original Message ----- 
From: "Jim Franz" <franz400@xxxxxxxxxxxx>
To: <MIDRANGE-L@xxxxxxxxxxxx>
Sent: Friday, September 19, 2003 10:51 PM
Subject: ifs files with .eml extension


Are there valid files in the ifs with a ".eml" extension.
I found some on a customer's system with what might
be a Nimbda payload (readme.exe). In every subdirectory
of several directories, with random file names.
jim
_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.