On 9/26/00, <[EMAIL PROTECTED]> penned:
>  > D3ced61f.FWD
>>  IWM177.tmp
>>  Q2cbea2d.FWP
>>  Q3ced61f.FWP
>
>The FWD and FWP files are regular E-mails, waiting to go out
>(forwarded E-mails, the FWP being the recipient file, and the FWD
>being the actual E-mail).  The TMP file I'll get to in a minute.

OK. I guess they couldn't connect to the intended mail server and
were waiting since they were a couple hours old.

>  > Memo # 4 July 182000S4J(2).doc
>>  Memo # 4 July 182000S4J(3).doc
>>  Memo # 4 July 182000S4J(4).doc
>
>This is almost certainly an attachment someone received and was
>reading through web messaging -- or perhaps tried a couple times to
>read but couldn't.

Do those files (the word docs, etc.) actually get opened on the
server when a person chooses to Open File rather than Save to disk?
If so, is there a way to turn that off? Sounds like a virus waiting
to happen otherwise.

>  > IWM178.tmp
>>  IWM176.tmp
>>  The IMW.tmp files and Word docs were written at the same time as Doc
>>  Watson by the Event Viewer.
>
>The IWMxxx.TMP file are IMail Web Messaging temporary files.  The
>HTML is written to the temp files and then sent to the user.  If
>these files stick around, it often means that there was a crash.

Yep, there was.

>Take a look at the IWM*.TMP files.  If they are identical, it likely
>means that IMail web messaging is choking on something.  Taking a
>look at the last few lines should give you an idea.  When I found
>web messaging crashing, looking at those files traced it back to a
>specific E-mail that someone received.  By copying the .MBX file it
>was in, I was able to narrow it down to the specific message and
>send Ipswitch the offending message that caused the crash.
>
>If you aren't sure, post the last 5-10 lines of the .TMP files, and
>let us know if they are the same or different.

Thanks Scott. That was a big help.

One of the IMW.tmp files was empty, the other 2 had close to the same
lines. Everything after the line about the MSWordDoc was in the first
file, than not in the last. I presume this is where it crashed.

Joe
D'Albert=C:\WINDOWS\TEMP\AutoRecovery
save of Memo # 3 July
182000.asdJoe
D'Albert(C:\WINDOWS\TEMP\Memo # 3
July 182000.docJoe D'Albert4C:\My
Documents\Personal\Memo # 3 July
182000S4J.docLouis D.
Manduca8C:\My Documents\I.R.
Letters\Memo # 4 July
182000S4J.doc�@�4md
)P@G�Times
New
Roman5��Symbol3&�Arial"��-htI�tI��[!*����r0��INTERNATIONAL
RECRUITING, INCLouis D.
ManducaLouis D.
Manduca��
���� �FMicrosoft Word Document
MSWordDocWord.Document.8�9�q
-----------------------------7d0be1267c
Content-Disposition: form-data; name="eom"

true
-----------------------------7d0be1267c--
--

Bud Schneehagen - Tropical Web Creations

_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/
ColdFusion Solutions / eCommerce Development
[EMAIL PROTECTED]
http://www.twcreations.com/
954.721.3452
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to