It is related to the password policy that you configure for the domain. if
blank password is permitted, accounts created from exchange administrator
sets a blank password.
the identical password to the user is created when the minimum password
lenght is set on the domain.
Aret
-Original
Make sure that your MX records in the new domain are correctly set up to go
to this server first. Use the directory import to then add a new e-mail
address to each mailbox, with this set as the reply address.
Tris
Tristan Gayford
Deputy
I was referring to a second RU Service, not a second RU Policy. Have you
tried that?
-Original Message-
From: Jean-Francois Bourdeau [mailto:[EMAIL PROTECTED]]
Sent: 17 September 2001 17:52
To: Exchange Discussions
Subject: RE: Recipient Update Service Redundancy
We tried to create a
Don't you think he might need it?
-Original Message-
From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 17, 2001 10:33 PM
To: Exchange Discussions
Subject: RE: God Bless America (way OT)
ROFL
I thought to myself after I sent it. God, I hope I remembered to
We have: sendmail recieving mails for our domain. Sendmail forwards all
the mail to our 2 exchangeservers.(5.5 sp3)
When an employee configures the out of office, it works for internal
people but not for people from the internet.
Yes we have a firewall, but it doesn't block smtp,
Who
Kurt,
Are you trying to start the FAQ flame again, (IE please read the FAQ it is
to do with the setting in the IMC restriction) AND I HIGHLY advise not
removing it (every seen a exchange server fall over when it's filled up with
a mail loop, it's horrible).
Cheers
Paul
Standards are like
Hi everyone!
Can anyone tell me if they've had any problems with moving mail items with
attachments into pst's or public folders with the error messages that the
item cannot be moved/user does not have permissions to move the item. If
users try to move one item at a time it's OK, select more
Did you run the Performance Optimizer after applying SP4?
Neil
-Original Message-
From: Halliday S (ISELS) [mailto:[EMAIL PROTECTED]]
Posted At: 18 September 2001 12:02
Posted To: Exchange Mailing List
Conversation: Exchange 5.5 SP4.0 - Moving Attachments
Subject: Exchange 5.5 SP4.0 -
Hi Neil,
Yes I did and I've also run it since then. MS supposedly viewed our files
through a 3rd party support company but came back with nothing. Symantec
think it's an Exchange problem! Me - I feel like a bouncy ball!
Any help appreciated.
Thanks.
Stephanie.
-Original Message-
OOPs sorry for my last answer. Yes that's what we tried but we will try
it again because it should work. MS said we can have as many RU service
as we have DC.
JF
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Mark Harford
Sent: 18 septembre, 2001
Yes the outbound messages are the ones that seem to get stuck. I looked at
details of the messages and most of them said (host unreachable) but there
were two other ones that said (network error during host resolution). Im
not sure what that means but I think its on their side. (hopefully)
Yes the outbound messages are the ones that seem to get
stuck. I looked at
details of the messages and most of them said (host
unreachable) but there
were two other ones that said (network error during host
resolution).
it means there was an error trying to resolve the remote host
Just out of interest.
Do you have to do the 'nslookup'from your exchange server or can you do it
from an NT workstation command prompt?
Many thanks
Regards
Louis Joyce
-Original Message-
From: Atkinson, Daniel [mailto:[EMAIL PROTECTED]]
Sent: 18 September 2001 13:54
To: Exchange
your DNS settings are messed up
www.theircompany.com is not a valid DNS server. 127.0.0.1 is your loopback
address, so unless you have DNS running on the machine you are querying
from, nothing will happen.
go to 'networking' in the control panel, look under protocols, look at the
properties for
SERVER: www.theircompany.com
IP ADDRESS: 127.0.0.1
whoops, think i just realised that you have substituted dummy
addresses...d'oh
dan.
_
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives:
i did it from another server on my network (its not my exchange server
though)
-Original Message-
From: Joyce, Louis [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 9:22 AM
To: Exchange Discussions
Subject: RE: ims queues
Just out of interest.
Do you have to do the
Desktop will work.
- Original Message -
From: Joyce, Louis [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Tuesday, September 18, 2001 9:22 AM
Subject: RE: ims queues
Just out of interest.
Do you have to do the 'nslookup'from your exchange server or can you do it
Dear Richard,
Host unreachable may mean that the other company's e-mail server
is down.
network error during host resolution may mean that your Exchange
Server does not recognize the e-mail domain.
In the Exchange Admin program, on the IMC, on the Connections tab,
I've had this before but always in a test environment where the AD was
expendable but now I cant trash the AD
I've had an Exchange 2000 install go wrong. I've managed to get the
mailboxes off the AD but the server was trashed and rebuilt without removing
Exchange 2000 in any kind of formal way.
It shouldn't matter where you run your dns query from. In some cases of
split-DNS scenarios (if you don't have your internal DNS forward to you
external), you can still run nslookup from a workstation, you will just need
to specify the address of you external DNS server so that will be where
We have a form that resides in our Organizational Forms Library that we are
constantly updating, but for some reason everytime I make a change and then
subsequently re-publish the form, the next time I open up the form it is the
same as before I made any changes. It has happened several times
Do a search on Technet for Forms Cache
Andy David
J Muller International
-Original Message-
From: Callan, Chris [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 10:00 AM
To: Exchange Discussions
Subject: Form not updating.
We have a form that resides in our
I had encountered a client's mailbox which I believe had a corrupt Address
Cards View Setting.
The initial symptoms were that Outlook complained that it Could not access
the folder, when a client (Mrs-X) tried to view the contacts folder for
another mailbox to which she had been given
CONTEXT ALERT!
-Michèle
Immigration site: http://LadySun1969.tripod.com
Our new 2001 Miata: http://members.cardomain.com/bpituley
Tiggercam: http://www.tiggercam.co.uk
-
If an infinite number of rednecks riding in an infinite number of
talk to my agent (he might like to watch)
-Michèle
Immigration site: http://LadySun1969.tripod.com
Our new 2001 Miata: http://members.cardomain.com/bpituley
Tiggercam: http://www.tiggercam.co.uk
-
If an infinite number of rednecks
did you forget a won't?
-Michèle
Immigration site: http://LadySun1969.tripod.com
Our new 2001 Miata: http://members.cardomain.com/bpituley
Tiggercam: http://www.tiggercam.co.uk
-
[Theoretical physics] is mainly pure thought, for which my
::Calling Brian::
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of
[EMAIL PROTECTED]
Sent: Tuesday, September 18, 2001 7:25 AM
To: Exchange Discussions
Subject: RE: God Bless America (way OT)
talk to my agent (he might like to watch)
-Michèle
There's a KB on that, I'm sure. Let me go search the KB for it...
Yep. There's a KB on it, all right. Gotta read it carefully, but it's there.
Now go find it. I'll give you a hint. The first number is 2.
(:=
Great Cthulhu Jones
CEO, R'lyeh Consulting
http://www.zzzptm.com/cthulhu
Joe's brother.
I dreamed I saw Joe Hill last night, alive as you or Mark Hanji.
(:=
Great Cthulhu Jones
CEO, R'lyeh Consulting
http://www.zzzptm.com/cthulhu
http://www.bad-managers.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
And it starts with a Q
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Great Cthulhu
Jones
Sent: Tuesday, September 18, 2001 7:33 AM
To: Exchange Discussions
Subject: RE: Removing Exchange 2000 after abortive install
There's a KB on that, I'm sure.
Version number is for documentation only and does nothing else.
-Original Message-
From: Lynne July [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 10:21 AM
To: Exchange Discussions
Subject: RE: Form not updating.
Make sure you increment the version number (on the
Yes you do - it was still early in the morning for me!
Tristan Gayford
Deputy Systems Network Manager
Cranfield University at Silsoe
-Original Message-
From: Walden H. Leverich [mailto:[EMAIL PROTECTED]]
Sent: 18 September 2001
Buick, Pontiac, Dodge.
SS
-Original Message-
From: Jean-Francois Bourdeau [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 17, 2001 9:30 PM
To: Exchange Discussions
Subject: RE: Exchange virus protection and filters
Mime sweeper, antigen Sybari
JF
or just do a RESTEST from your Exchange box
-Michèle
Immigration site: http://LadySun1969.tripod.com
Our new 2001 Miata: http://members.cardomain.com/bpituley
Tiggercam: http://www.tiggercam.co.uk
-
Jesus saves! By using double coupons
What do you mean by resetting the IIS permission, and according to which
MS KB article? I've seen this happening when people applied Code Red
Cleaner or manually removed all of the ISAPI associations. All you need
to do is restart the IISAdmin service (the Exchange Services will also
be
User set up to work offline with laptop. Office2K on Win2k Pro laptop.
Sync generates errors on inbox and contacts. Other folders sync O.K.
Have tried manual sync, new ost, replace ems files and repair, and scanpst.
None changes results.
Your recommendations please.
TIA
Orin Rehorst
Error
hi all,
we are having trouble getting scanmail emanager (spam blocker) to work. It
seemed to install ok, but doesn't do any spam-blocking.
the manual says to check that 'contscan.exe' and 'cm_smex.exe' are running
as NT processes - well, they're not, and if we restart the services nothing
Duh. Any moron could figure *that* out.
Of course, you're not just *any* moron. You're Tasty Flounder!
(To those who don't get the joke, it's an inside joke on one of the secret
cabal lists. If you're wondering how many secret cabal lists currently
exist, latest counts place them at around 17.
It also makes a brand new form so you don't have issues of someone with a
form of the same name but earlier version munging things up. Change the name
of the form, preferably in the version number so you have a change what
makes sense, and your problem evaporates.
(:=
Great Cthulhu Jones
CEO,
Over the last couple of hours the number of probes (Code Red, etc.) against
my web servers has skyrocketed. This has also been reported by other people
on another mail list I am on. Make sure those servers are protected.
--
Chuck Parkey
Creative Teaching Press
Do you get these problems from another workstation? If so, you got problems
with the mailbox.
(:=
Great Cthulhu Jones
CEO, R'lyeh Consulting
http://www.zzzptm.com/cthulhu
http://www.bad-managers.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Orin
Yeah. It's about that time again.
(:=
Great Cthulhu Jones
CEO, R'lyeh Consulting
http://www.zzzptm.com/cthulhu
http://www.bad-managers.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Chuck Parkey
Sent: Tuesday, September 18, 2001 10:06 AM
To:
You probably have the earlier version published in your Personal Forms
Library. Use the Manage Forms in Advanced Options and remove it from there.
Outlook will always look at your Personal Forms Library first.
If that's not the case, try clearing your forms cache.
S.
-Original
In order to use eManager you have to be running Realtime Scan in Mapi mode.
It works great for us.
Annette Lewis-Capers
Charles Schwab Technology Innovation
415.667.9165
mailto:[EMAIL PROTECTED]
WARNING: All email sent to this address will be received by the Charles
Schwab.
Corporate Email
It looks like someone's used the Code Red backdoor to
install a new worm. The attacks seem to be coming from IIS servers...
Phil
-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK
-Original Message-
From: Great Cthulhu
Follow-up: another admin reported his servers are being scanned and his
inbound traffic is spiking bad right now.
Hold on to your hats and other clothing. Hope you patched all your boxes by
now. If you haven't you are so going to regret not placing a higher priority
on security.
(:=
Great
http://www.nipc.gov/warnings/advisories/2001/01-021.htm
-Original Message-
From: Great Cthulhu Jones [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 11:25 AM
To: Exchange Discussions
Subject: RE: OWA Admins - Heads Up
Follow-up: another admin reported his servers are being
I received an E-mail from a person that I didn't know this morning, and the
subject line was a lot of nonsense characters.
Using Outlook 2000 I highlighted it and it kicked off the attachment, which
opened Media Player and tried to play a file, but got a content error.
Here is the header from
Sounds like what I just now got notice of from Bugtraq
-BEGIN PGP SIGNED MESSAGE-
There have been numerous reports of IIS attacks being generated by
machines over a broad range of IP addresses. These infected
machines are using a wide variety of attacks which attempt to exploit
already
Since I got a number of alerts that I was sending out a virus infected
message, I may be off the list for a while.
John Matteson; Exchange Manager
Geac Corporate Infrastructure Systems and Standards
(404) 239 - 2981
...the words that I remember from my childhood still are true, that there
are
I received the same thing. I thought it may have been W32/APost@MM, because
my alert said GSE blocked readme.exe. Nothing in the description for this
virus says anything about media player. Any thoughts?
Diane
Diane Boehm
SC Johnson
[EMAIL PROTECTED]
-Original Message-
From:
Symantec has something now, not much:
http:[EMAIL PROTECTED]
-Original Message-
From: Atkinson, Daniel [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 8:41 AM
To: Exchange Discussions
Subject: RE: New Virus / Worm ??
yes, there is a new virus on the loose w32/nimda - we
If you aren't doing it, do it NOW.
Don't take a chance, you can always turn it off later.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Boehm, Diane M.
Sent: Tuesday, September 18, 2001 8:37 AM
To: Exchange Discussions
Subject: RE: New Virus / Worm
My OWA is getting SLAMMED!! OUCH!!
Thanks
Russell
-Original Message-
From: John Matteson [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 11:32 AM
To: Exchange Discussions
Subject: New Virus / Worm ??
I received an E-mail from a person that I didn't know this morning, and
Changing the version number does not change the name of the form.
-Original Message-
From: Great Cthulhu Jones [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 10:59 AM
To: Exchange Discussions
Subject: RE: Form not updating.
It also makes a brand new form so you don't
at your own risk - reboot and remove the .eml files. seems to cure the
problem but doesn't prevent re-infection.
dan.
_
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives:
the eml files appear all over the hard disk, although before i deleted them
all I did notice that they seemed to be in all the network shares - can't
confirm now they're gone!
dan.
_
List posting FAQ:
I also received one from you, or the address. Open relay time?
JDE
-Original Message-
From: Ryan Malayter [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 5:18 PM
To: Exchange Discussions
Subject:RE: New Virus / Worm ??
AFAIK, this infected message didn't
Please name of Worm, our Internet provider say that is greencode and
suggested us to disconnected some of our servers,,,we have ALL MS patches in
those servers how could tha tbe?!~
--er
-Original Message-
From: Ewins, James [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001
My mail server is not an open relay... and it appears stadacona.ca isn't,
either. Maybe the worm itself handles the SMTP conversation?
-Original Message-
From: Ewins, James [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 11:18 AM
To: Exchange Discussions
Subject: RE: New
On the servers that were infected at our company, we found a mmc.exe that
was running in c:\winnt. This appeared to be regenerating the readme.eml
files. We killed the process, deleted the file, and deleted the .eml files.
This appears to have worked for now.
Not sure how to stop it from
We just sent the following to all our customers.
Tom Buoniello
Sybari Software, Inc.
[EMAIL PROTECTED]
Virus Alert: W32/Nimda.A@mm
Is this a Virus that uses E-mail?: yes
Virus Name:
---
W32/Nimda.A@mm
Alias:
---
W32/Nimda-A
W32/Nimda-mm
E-mail Subject:
I've checked out Q152959, but I wanted to double check for any gotchas in
this process. This box is also a BDC but those services will be removed.
Ex5.5 SP4 NT4 SP6
2 other Ex5.5 SP4 Win2K SP4 boxes in the same site.
William L. Smith
Systems Administrator
It's a new/variant worm, possibly related to this:
http://www.zdnet.com/eweek/stories/general/0,11011,2810273,00.html
W
-Original Message-
From: Andrew Chan [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 12:41 PM
To: Exchange Discussions
Subject: RE: New Virus / Worm ??
http://vil.mcafee.com/dispVirus.asp?virus_k=99209;
-Original Message-
From: Tom Buoniello [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 9:45 AM
To: Exchange Discussions
Subject: RE: New Virus / Worm ??
We just sent the following to all our customers.
Tom Buoniello
I'll blow that horn, Daniel!! :-)
... or smile sweetly while someone else does, since I'm a woodwind
percussion player, not a brass player.
-Michèle
Immigration site: http://LadySun1969.tripod.com
Our new 2001 Miata: http://members.cardomain.com/bpituley
Tiggercam:
Make sure your hands aren't wet when you're unplugging the power cable.
S.
PS:Read the FAQ. Tons of info there.
-Original Message-
From: William Smith [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 12:42 PM
To: Exchange Discussions
Subject: Removing First Exchange
Hi,
A few of my end users are receiving e-mail from the notification service
every few hours. A sample is below.
-Original Message-
From:
Are you sure it was corruption and not user error?
Ed Crowley MCSE+Internet MVP
Tech Consultant
Compaq Computer Corporation (soon to be HP)
All your base are belong to us.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Wong, Joe
Sent: Tuesday,
M... tasty flounder tacos!
Ed Crowley MCSE+Internet MVP
Tech Consultant
Compaq Computer Corporation (soon to be HP)
All your base are belong to us.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Great Cthulhu
Jones
Sent: Tuesday, September 18,
LOL! Really, when you follow that Q article, you won't have any issues.
I've done it at least 5 times so far [1]. No problems.
S.
[1] I get a sick pleasure from removing first servers in sites.
Nnhahahahahah!
-Original Message-
From: William Smith [mailto:[EMAIL
Look at the message headers and see where the message is coming from.
Ed Crowley MCSE+Internet MVP
Tech Consultant
Compaq Computer Corporation (soon to be HP)
All your base are belong to us.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jason Kelley
I followed the procedures for clearing my forms cache, but when I opened the
form after again changing it. It was still the same as before the change.
-Original Message-
From: Andy David [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 10:18 AM
To: Exchange Discussions
Have you ran around in a circle flapping your arms?
Have you looked at Q232303?
Andy David
J Muller International
-Original Message-
From: Callan, Chris [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 02:39 PM
To: Exchange Discussions
Subject: RE: Form not updating.
Since we migrated our mail system to another server, mail which was
previously being move to a public folder is now ending up in the users
root inbox. This is only true in some cases. When I tell it in rule wizard
to move to folder and delete it nothing changes. I read to use rule of
forward to
I am looking for a program that will allow me to hold messages sent to a
distribution list until they are reviewed/approved by someone. Does
anybody know of software that will do that, or is there something in
Exchange?
_
List
How about your Personal Forms Library? Did you check that as well?
-Original Message-
From: Callan, Chris [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 2:09 PM
To: Exchange Discussions
Subject: RE: Form not updating.
I followed the procedures for clearing my forms
Have you confirmed that this is only a problem on your workstation? Have
you replaced the Frmcache.dat file with a known good one? (Sometimes
clearing the cache does not cut it.)
-Original Message-
From: Callan, Chris [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 2:39 PM
maybe
-Michèle
Immigration site: http://LadySun1969.tripod.com
Our new 2001 Miata: http://members.cardomain.com/bpituley
Tiggercam: http://www.tiggercam.co.uk
-
WARNING: The consumption of alcohol may lead you to think people are
No it did not help. I have tried that also. but the same names keep
repopulating the form.
-Original Message-
From: Soysal, Serdar [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 2:45 PM
To: Exchange Discussions
Subject: RE: Form not updating.
Well, did that help or not?
It is throughout the whole organization.
-Original Message-
From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 2:54 PM
To: Exchange Discussions
Subject: RE: Form not updating.
Have you confirmed that this is only a problem on your workstation? Have
you
http://www.mcaffee.com/ right on the frontpage... heres a little more
as well...
http://www.wired.com/news/technology/0%2C1282%2C46944%2C00.html
http:[EMAIL PROTECTED]
tml
-Original Message-
From: Etts, Russell [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 2:51 PM
Yes, NAI released an extra.dat Still waiting for trend to put out an
update.
Pete Pfefferkorn
Senior Systems Engineer/Mail Administrator
University of Cincinnati
51 Goodman Street
Cincinnati, OH 45221
Phone - (513) 556-9076
Fax - (513) 556-2042
-Original Message-
From: Etts,
Yes I have tried it that way, and I don't have a good copy of the form. I am
trying to update the form so that it is correct, and it won't take.
-Original Message-
From: Thomas Di Nardo [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 3:23 PM
To: Exchange Discussions
Subject:
If you block EXE's there is no need to wait for updates. For more
information, visit http://www.cmsconnect.com
Dan
-Original Message-
From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 3:16 PM
To: Exchange Discussions
Subject: RE: New
has anybody seen anything Official about the .eml files? I've just heard
anecdotal evidence about them.
-Michèle
Immigration site: http://LadySun1969.tripod.com
Our new 2001 Miata: http://members.cardomain.com/bpituley
Tiggercam: http://www.tiggercam.co.uk
I heard something official from this guy I know...
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 3:37 PM
To: Exchange Discussions
Subject: RE: New Virus / Worm ??
has anybody seen anything Official about the .eml files?
They are mentioned in the NAI website. I've also seen mention of WAV and COM files.
-Peter
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 12:37
To: Exchange Discussions
Subject: RE: New Virus / Worm ??
has anybody seen anything
At this point, I'd recreate the form from scratch, delete the form from
Org Forms, and republish with the new version.
-Original Message-
From: Callan, Chris [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 3:24 PM
To: Exchange Discussions
Subject: RE: Form not updating.
I believe readme.eml is loaded to an infected IIS website as an attachment to
every page in the site.
When the infected site is accessed, it is downloaded as an .exe
This is what I see on securityfocus.com and the noted anti-virus sites.
John Allhiser MCSE CCNA
Network Engineer
Business
you got a link for where they're mentioned? I looked at nai.com and at
sybari.com sophos.com and can't find anything about them.
maybe i'm just blind.
-Michèle
Immigration site: http://LadySun1969.tripod.com
Our new 2001 Miata: http://members.cardomain.com/bpituley
Tiggercam:
I've got a file server with a bunch of .eml files - desktop.eml fax1.eml
2.eml professional.eml etc. - all created at the same time in various
subdirectories of a public share all the same size all owned by the same
person.
That sounds suspiciously like this, but I can't find anything
It appears the virus is putting the guest account into the local admin group
on the infected server.
I am blocking all .exe's
I used exmerge to recover all readme.exe's that had already made it past the
block.
I have installed the new dat from McAfee on all IIS servers.
It cleans all the files,
I started blocking them about a month ago. We had a user receive one, then
when it was opened up it had an .exe in it as an attachment. I decided to
block them as I did not want this used as a conduit to bypass our .exe
blocking. The good news is that it has worked, I have blocked about 6 or
Look here under Removal Instructions:
http://vil.nai.com/vil/virusSummary.asp?virus_k=99209
Matt Hoffman
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 3:47 PM
To: Exchange Discussions
Subject: RE: New Virus / Worm ??
you got
Good afternoon,
OUTLOOK 98/Exhange 5.5 SP3. I didn't know if this was OUTLOOK or EXCHANGE
or a combination of both.
I have a name that does not resolve in OUTLOOK when sending a message. You
can type in ANG PRES or PRES ANG or anything along those lines but if you
type in Angie Presnell the
Then you're not doing it right. Put the version number in the name of the
form. Then change the version number in the name of the form.
Then what I said.
(:=
Great Cthulhu Jones
CEO, R'lyeh Consulting
http://www.zzzptm.com/cthulhu
http://www.bad-managers.com
-Original Message-
From:
I wish I didn't know the answer to this one: C:\shared\
-Original Message-
From: Erik Sojka [mailto:[EMAIL PROTECTED]]
Posted At: Tuesday, September 18, 2001 03:02 PM
Posted To: MSExchange Mailing List
Conversation: New Virus / Worm ??
Subject: RE: New Virus / Worm ??
What
I'm connected to the users machine and looking at the original e-mail.
Jason
-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 11:28 AM
To: Exchange Discussions
Subject: RE: Notification Service
Are you opening the original or a forwarded
May I have a copy please!!
-Original Message-
From: Daniel Deward [mailto:[EMAIL PROTECTED]]
Sent: 18 September 2001 21:08
To: Exchange Discussions
Subject: RE: New Virus / Worm ??
If you want the source code for readme.exe, readme.asm. Send me an e-mail
for a copy. It's very
1 - 100 of 139 matches
Mail list logo
