Re: [cobalt-users] How to find W32.Klex.H@mm Virus on my server?

["SW" <wppiphoto@xxxxxxxx>]

David,

Thanks for the info. I found it by downloading & installing f-prot. As I
thought, it was in one of of the users /home/spool/mail directory.

Thanks,

SW
----- Original Message ----- 
From: "David Lucas" <david@xxxxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Tuesday, December 16, 2003 12:31 AM
Subject: Re: [cobalt-users] How to find W32.Klex.H@mm Virus on my server?


At 10:59 PM 12/15/2003, you wrote:
>I've just finished doing a backup of my Raq3 using raqbackup.sh but when I
>try to download the *.tar.gz files, it seems one of them contains a virus
>(probably from an e-mail a user hasn't downloaded off the server) and
Norton
>doesn't allow me to download the file (which is fine). But now, I need to
>find out how can I find where this file is on the server that contains this
>virus?
>
>Any suggestions on how to go about doing this? My thought on this is that
>there is no point to make a full backup of the server which contain
viruses.
>;-)

there is no harm in doing the back up, unless you are going to go through
all the email in which case the klez virus would be a problem
you could run a virus scanner on your server as many of us do, the virus
could have already been deleted.  I see about a half dozen or more of the
Klez every day arrive

>Thanks,
>
>SW
>
>
>_____________________________________
>cobalt-users mailing list
>cobalt-users@xxxxxxxxxxxxxxx
>To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
>http://list.cobalt.com/mailman/listinfo/cobalt-users
>
>--
>This message has been scanned for viruses and
>dangerous content by MailScanner, and is
>believed to be clean.



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users