Re: [cobalt-users] Hacked ro Virus??

[Ashley Burgess <ashley@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>]

On Tue, 2002-11-26 at 06:26, Aaron Lamb wrote:
> I have no clue what is going on here.  I recently discovered .eml files
> through out my file system on my 4i.  How did they get there and how do
> I get rid of them other than manually deleting them one by one.  This
> one has me a bit worried.
> 
Are you providing samba shares on this machine? If so I would say that a
windows machine on the same network is infected with nimda as one of its
propagation methods is to create emails with infected attachments ALL
over the file system of the infected machine and also on any open
windows share on the network.

Beware that if you looked at this email with an unpatched version of
outlook/outlook express is is very likely that you are now also
infected.

Ashley