[Sysadmin] virus found in sent message ""
postmaster at evolt.org
postmaster at evolt.org
Mon Jun 12 12:51:52 CDT 2006
Attention: commons-dev at ws.apache.org
A virus was found in an Email message you sent.
This Email scanner intercepted it and stopped the entire message
reaching its destination.
The virus was reported to be:
Worm.Mydoom.M
Please update your virus scanner or contact your IT support
personnel as soon as possible as you may have a virus on your system.
Your message was sent with the following envelope:
MAIL FROM: commons-dev at ws.apache.org
RCPT TO: css-d at lists.css-discuss.org
... and with the following headers:
---
MAILFROM: commons-dev at ws.apache.org
Received: from 138.red-80-34-160.staticip.rima-tde.net (HELO ws.apache.org) (80.34.160.138)
by tempest.evolt.org with SMTP; 12 Jun 2006 12:51:41 -0500
From: commons-dev at ws.apache.org
To: css-d at lists.css-discuss.org
Subject:
Date: Mon, 12 Jun 2006 19:53:29 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0005_4F1DFA4E.B355D9DA"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
---
The original message is kept in:
tempest:/var/spool/qmailscan/quarantine/new/tempest11501347036204150
where the can further diagnose it.
The Email scanner reported the following when it scanned that message:
---
---clamdscan results ---
LibClamAV Error: hex2int() translation problem (40)
LibClamAV Error: readdb(): Malformed pattern line 30342 (file /var/spool/qmailscan/tmp/tempest11501347036204150/clamav-905ddb114d7e5dc0/main.db).
/var/spool/qmailscan/tmp/tempest11501347036204150/1150134704.4156-0.tempest: OK
/var/spool/qmailscan/tmp/tempest11501347036204150/letter.scr: Worm.Mydoom.M FOUND
/var/spool/qmailscan/tmp/tempest11501347036204150/orig-tempest11501347036204150: OK
---
More information about the Sysadmin
mailing list