Ask the Expert

.EML file infected by Nimda

My free AVG software has found an .EML file to be infected on my Windows 2000 machine. The .EML file was resident in a folder called .trashes, which was created when I linked to the folder from my Apple Mac OS X Ibook over the network. The .EML file was infected with I-worm/nimda. It was also cleaned and removed by the software. Can you tell me how this file would have got into that folder, and are there any viruses out there that could specifically look for this type of folder on a Windows machine and then infect it?


    Requires Free Membership to View

Many worms now make use of openly shared folders under Windows to propagate. If you share a folder and enable writing to it, the worm will take advantage and copy itself to this folder. It does not matter what the name of the folder is.

A good idea is to password protect the folder, so someone writing to it has to input the password.


For more information on this topic, visit these other SearchSecurity.com resources:
Virus Prevention Tip: Top virus threats, part two: Nimda
Featured Topic: Learn about Nimda
Best Web Links: Malware

This was first published in August 2002

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: