Re: Question about .eml files I am finding

["Matt Jezorek" <matt@xxxxxxxxxxxxx>]

SOB I Bet thats the problem I bet I got hit by nimda by one of our windows
machines on the network just recently. Well that does it dumping Virows for
Solaris then going to kill this machine running a test on it now bet it
returns corrupt. I got a samba share on that for easy file editing.

----- Original Message -----
From: Patrick Duane Dunston <duane@sukkha.homeip.net>
To: <security-discuss@linuxsecurity.com>
Sent: Saturday, November 10, 2001 9:22 PM
Subject: Re: Question about .eml files I am finding


> I forgot this one:
>
> http://support.bb4.com/archive/200109/msg00968.html
>
>
> On Sat, 10 Nov 2001, Patrick Duane Dunston wrote:
>
> > > I am finding files on my filesystem mostly where apache has access and
I have no clue why they are showing up on my server nor can I find any
information in my logs
> > >
> > > Here is the Directory Listing
> >
> >
> > Here are a couple of emails I found.  Does this apply to your setup?
> >
> >
> > I found this info on the web:
> >
> > http://lugwash.washtenaw.cc.mi.us/linux-users/2001-09/msg00123.html
> > http://www.mandrakeforum.com/article.php?sid=1205&lang=en
> >
> > If not then start preparing to audit your machine for a potential
> > intrusion attempt.
> >
> > http://www.cert.org/tech_tips/intruder_detection_checklist.html
> > http://www.cert.org/tech_tips/root_compromise.html
> >
> >
> >
>
> --
> duane
>
>
> --
>
> GnuPG Public Key:  http://sukkha.homeip.net/pgp.html
>
> --
>
> Fun reading:  8-)
> http://linuxtoday.com/search.php3?author=Duane:Dunston
>
>
>
> ------------------------------------------------------------------------
>      To unsubscribe email security-discuss-request@linuxsecurity.com
>          with "unsubscribe" in the subject of the message.

------------------------------------------------------------------------
     To unsubscribe email security-discuss-request@linuxsecurity.com
         with "unsubscribe" in the subject of the message.