TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
the *.enc files are the packet log files. From the name of the file, it is an "evidence" log file. Evidence packet logs record the given packets that trigger a RealSecure signature. In your case: at some point, RealSecure Server Sensor detected a CodeRed Attack, alerted the console and logged the offending packet into the evidence file. This file can be safely moved or deleted if desired I believe our default is 10 evidence log files that are filled in a round robin configuration to 1024K. If you wish this configuration can be altered, refer to the documentation for complete details. I hope this helps, John -----Original Message----- From: Adi Sakti [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 09, 2002 8:55 PM To: [EMAIL PROTECTED] Subject: evd000.nc - Worms or not ? TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- Dear all, After installing Norton Anti Virus on which server sensor v6.5 installed I got warning from NAV saying that it detects worm from file "evd000.enc". Does anybody knows whether this is worm or NAV misdetect it as worm. If this is not worm what is evd000.enc actually ? ===== Message from NAV ====== Scan type: Realtime Protection Scan Event: Virus Found! Virus name: CodeRed Worm File: C:\Program Files\ISS\issSensors\server_sensor_web_english\BlackICE\evd000.enc Location: Quarantine Computer: JKTMPDCEHP01 User: SYSTEM Action taken: Clean failed : Quarantine succeeded : Access denied Date found: Sat Jul 06 05:44:40 2002 ======================================================= Regards Adi _________________________________________________________________ Join the world's largest e-mail service with MSN Hotmail. http://www.hotmail.com
