System Anti-Virus Administrator
2002-Aug-01 13:01 UTC
[Samba] Virus found in sent message "A WinXP patch"
Attention: samba <samba@samba.org>. A Virus was found in an Email message you sent. This Email scanner intercepted it and stopped the entire message reaching it's destination. The Virus was reported to be: the W32/Klez.h@MM virus !!! Please update your virus scanner or contact your I.T. support personnel as soon as possible as you might have a virus on your system. Your message was sent with the following envelope: MAIL FROM: samba@samba.org RCPT TO: af@caldera.de ... and with the following headers: Received: from mail.t-intra.de (HELO mailc0910.dte2k.de) (62.156.147.75)by mail.ut.caldera.com with SMTP; 1 Aug 2002 19:58:50 -0000 from mailc0909.dte2k.de ([10.50.185.9]) by mailc0910.dte2k.de with Microsoft SMTPSVC(5.0.2195.4453);Thu, 1 Aug 2002 21:57:12 +0200 from sis-mail.sis-inspection.de ([217.89.78.58]) by mailc0909.dte2k.de with Microsoft SMTPSVC(5.0.2195.4453);Thu, 1 Aug 2002 21:56:36 +0200 from Qmkrv (pc-ew [192.168.100.37])by sis-mail.sis-inspection.de (8.11.2/8.11.2/SuSE Linux 8.11.1-0.5) with SMTP id g71JvSA22550for <af@caldera.de>; Thu, 1 Aug 2002 21:57:28 +0200 From: samba <samba@samba.org> To: af@caldera.de Subject: A WinXP patch Message-ID: <200208011957.g71JvSA22550@sis-mail.sis-inspection.de> Date: Thu, 1 Aug 2002 21:57:28 +0200 The original message is kept in: clavin.ut.caldera.com:/var/spool/qmailscan/quarantine where the System Anti-Virus Administrator can further diagnose it. The Email scanner reported the following when it scanned that message: --- ---uvscan results --- /var/spool/qmailscan/clavin.ut.caldera.com102823193036110597/1554628_4204bc2dcd_1_.exe Found the W32/Klez.h@MM virus !!! /var/spool/qmailscan/working/new/clavin.ut.caldera.com102823193036110597 Found the W32/Klez.eml virus !!! ---