Re: [Micronet] Unusual virus in email?

Thanks, Jon.

In this case i was talking about using the Restore command within NAV
to return the quarantined file to its original location, deleting
recent junk/possibly infected emails and re-running NAV. Would that
work?

I realize that the mailbox only 'appears' to be separate emails--but
virus/worms are attachments which are (?) separate files. Are there
cases of malicious code simply inserted into the text/body of the
message?

thanks
Michael

And yes I was avoiding admitting that there is no backup of this users files...

At 12:20 PM -0700 8/10/04, Jon Johnsen wrote:
>Once a message is in a mail box, it isn't a separate, but just part
>of the file in.mbx. You've really answered your own question. We
>have seen that happen. Our solution has been to do a restore from
>the previous night's backup.
>
>Good luck.
>
>
>At 12:09 PM 8/10/2004, you wrote:
>>Hi
>>
>>very unexpected activity...user suddenly got a message that toc for
>>In box needed to be rebuilt, he said OK and when done the In box
>>was empty.
>>
>>In fact the In.mbx file is zero bytes.
>>
>>But now we have found that In.mbx is in quarantine! Why would NAV
>>move the whole file into quarantine and not just the infecting
>>file. We suspect that somehow the virus is not an attachment but
>>rather some kind of scripting/commands within the email.
>>
>>What is the risk of Restoring the quarantined file, deleting recent
>>junk emails and re-running NAV?
>>
>>Help!
>>
>>thanks
>>
>>Michael
>>--
>>------------------------------
>>Michael Rimar
>>Administrative Assistant
>>UC Botanical Garden
>>200 Centennial Drive #5045
>>Berkeley, CA 94720-5045
>>(510) 642-0849
>>fax (510) 642-3012
>>http://botanicalgarden.berkeley.edu
>>------------------------------
>>
>>"There's no bad weather, only the wrong clothes"
>>Scottish fisherman's proverb
>>
>>------------------------------------------------------------------------
>>The following was automatically added to this message by the list server:
>>
>>For information about Micronet, including subscribing to
>>or unsubscribing from its mailing list and finding out
>>about upcoming meetings, please visit the Micronet Web site:
>><http://micronet.berkeley.edu/>.
>
>
>Jon Johnsen
>Information Systems Office
>School of Public Health, UC Berkeley
>510 643.4357

-- 
------------------------------
Michael Rimar
Administrative Assistant
UC Botanical Garden
200 Centennial Drive #5045
Berkeley, CA  94720-5045
(510) 642-0849
fax (510) 642-3012
http://botanicalgarden.berkeley.edu
------------------------------
"There's no bad weather, only the wrong clothes"
Scottish fisherman's proverb
------------------------------------------------------------------------
The following was automatically added to this message by the list server:
For information about MAGNet, its meetings and events, and its
mailing list, including information on subscribing and unsubscribing,
see the MAGNet Web site at <http://magnet.berkeley.edu/>.