[Sysadmin] virus found in sent message ""

postmaster at evolt.org postmaster at evolt.org
Mon Jun 12 12:51:52 CDT 2006


Attention: commons-dev at ws.apache.org


A virus was found in an Email message you sent. 
This Email scanner intercepted it and stopped the entire message
reaching its destination. 

The virus was reported to be: 

Worm.Mydoom.M


Please update your virus scanner or contact your IT support 
personnel as soon as possible as you may have a virus on your system.


Your message was sent with the following envelope:

MAIL FROM: commons-dev at ws.apache.org
RCPT TO:   css-d at lists.css-discuss.org 

... and with the following headers:

---
MAILFROM: commons-dev at ws.apache.org
Received: from 138.red-80-34-160.staticip.rima-tde.net (HELO ws.apache.org) (80.34.160.138)
  by tempest.evolt.org with SMTP; 12 Jun 2006 12:51:41 -0500
From: commons-dev at ws.apache.org
To: css-d at lists.css-discuss.org
Subject: 
Date: Mon, 12 Jun 2006 19:53:29 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_0005_4F1DFA4E.B355D9DA"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000


---



The original message is kept in:

  tempest:/var/spool/qmailscan/quarantine/new/tempest11501347036204150

where the  can further diagnose it.

The Email scanner reported the following when it scanned that message:

--- 

---clamdscan results ---
LibClamAV Error: hex2int() translation problem (40)
LibClamAV Error: readdb(): Malformed pattern line 30342 (file /var/spool/qmailscan/tmp/tempest11501347036204150/clamav-905ddb114d7e5dc0/main.db).
/var/spool/qmailscan/tmp/tempest11501347036204150/1150134704.4156-0.tempest: OK
/var/spool/qmailscan/tmp/tempest11501347036204150/letter.scr: Worm.Mydoom.M FOUND
/var/spool/qmailscan/tmp/tempest11501347036204150/orig-tempest11501347036204150: OK

---



More information about the Sysadmin mailing list