[Sysadmin] virus found in sent message "qnh"

[postmaster at evolt.org]

Attention: agricola at envasesltda.com


A virus was found in an Email message you sent. 
This Email scanner intercepted it and stopped the entire message
reaching its destination. 

The virus was reported to be: 

Worm.Mydoom.M


Please update your virus scanner or contact your IT support 
personnel as soon as possible as you may have a virus on your system.


Your message was sent with the following envelope:

MAIL FROM: agricola at envasesltda.com
RCPT TO:   thesite at lists.evolt.org 

... and with the following headers:

---
MAILFROM: agricola at envasesltda.com
Received: from unknown (HELO envasesltda.com) (63.245.84.106)
  by tempest.evolt.org with SMTP; 12 Jun 2006 12:36:12 -0500
From: agricola at envasesltda.com
To: thesite at lists.evolt.org
Subject: qnh
Date: Mon, 12 Jun 2006 12:42:52 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_0006_22280C0B.3FF80AF3"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000


---



The original message is kept in:

  tempest:/var/spool/qmailscan/quarantine/new/tempest11501337736201072

where the  can further diagnose it.

The Email scanner reported the following when it scanned that message:

--- 

---clamdscan results ---
LibClamAV Error: hex2int() translation problem (40)
LibClamAV Error: readdb(): Malformed pattern line 30342 (file /var/spool/qmailscan/tmp/tempest11501337736201072/clamav-dcd400e3b5c23579/main.db).
/var/spool/qmailscan/tmp/tempest11501337736201072/1150133773.1075-0.tempest: OK
/var/spool/qmailscan/tmp/tempest11501337736201072/file.zip: Worm.Mydoom.M FOUND
/var/spool/qmailscan/tmp/tempest11501337736201072/orig-tempest11501337736201072: OK

---