RE: [cobalt-users] How to find W32.Klex.H@mm Virus on my server?

["Dan Kriwitsky" <list1@xxxxxxxxxxxxxxxxxxxx>]

> I've just finished doing a backup of my Raq3 using
> raqbackup.sh but when I try to download the *.tar.gz files, 
> it seems one of them contains a virus (probably from an 
> e-mail a user hasn't downloaded off the server) and Norton 
> doesn't allow me to download the file (which is fine). But 
> now, I need to find out how can I find where this file is on 
> the server that contains this virus?
> 
> Any suggestions on how to go about doing this? My thought on
> this is that there is no point to make a full backup of the 
> server which contain viruses.

It only affects Windows
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.h@xxxxx
ml

But, how many tar.gz files are on the server?
Check the list of email subjects. See if there's an email with that
subject on the server. How many people are leaving mail on the server
for extended periods? Maybe you should inform users that any old mail
will be deleted as of X date.
-- 
C2003 Dan Kriwitsky

Please reply to the list only. Off list replies are not read.