SOB I Bet thats the problem I bet I got hit by nimda by one of our windows machines on the network just recently. Well that does it dumping Virows for Solaris then going to kill this machine running a test on it now bet it returns corrupt. I got a samba share on that for easy file editing. ----- Original Message ----- From: Patrick Duane Dunston <duane@sukkha.homeip.net> To: <security-discuss@linuxsecurity.com> Sent: Saturday, November 10, 2001 9:22 PM Subject: Re: Question about .eml files I am finding > I forgot this one: > > http://support.bb4.com/archive/200109/msg00968.html > > > On Sat, 10 Nov 2001, Patrick Duane Dunston wrote: > > > > I am finding files on my filesystem mostly where apache has access and I have no clue why they are showing up on my server nor can I find any information in my logs > > > > > > Here is the Directory Listing > > > > > > Here are a couple of emails I found. Does this apply to your setup? > > > > > > I found this info on the web: > > > > http://lugwash.washtenaw.cc.mi.us/linux-users/2001-09/msg00123.html > > http://www.mandrakeforum.com/article.php?sid=1205&lang=en > > > > If not then start preparing to audit your machine for a potential > > intrusion attempt. > > > > http://www.cert.org/tech_tips/intruder_detection_checklist.html > > http://www.cert.org/tech_tips/root_compromise.html > > > > > > > > -- > duane > > > -- > > GnuPG Public Key: http://sukkha.homeip.net/pgp.html > > -- > > Fun reading: 8-) > http://linuxtoday.com/search.php3?author=Duane:Dunston > > > > ------------------------------------------------------------------------ > To unsubscribe email security-discuss-request@linuxsecurity.com > with "unsubscribe" in the subject of the message. ------------------------------------------------------------------------ To unsubscribe email security-discuss-request@linuxsecurity.com with "unsubscribe" in the subject of the message.
