similar to: Virus Question

I have discovered that many times the virus definitions I use for scanning messages (ClamAV, with the unofficial signatures http://sanesecurity.com/usage/linux-scripts/) are updated some time after my server has received an infected email. It seems the virus creators are trying to race the virus definition creators to see who can deliver first; more than half of the infected messages are found

An attachment called (WORM_SOBIG.C) in an email that appears to have been sent from your email address to (arrowcomp at xtra.co.nz) contained the virus (WORM_SOBIG.C), which has been deleted. If you do not believe you were the actual sender, the Klez virus is likely to be the culprit. The Klez virus works by forging the 'From' address inside the virus infected email, which means you can

(Embedded image moved to file: pic10389.pcx) NVC for Domino Virus Warning This is an automatically generated message. A possible virus, 'Yaha.E@mm', was detected in attachment 'Neu_Textdokument.zip_.scr' in document '[Samba] Neu Textdokument'. Database: 'KAWILK01 Mailbox'. Document was apparently created on '26.01.2003 17:45:16' by

ugh :) Today I became infected with the bliss virus, any info on this would be appreciated! How do I scan for files infected and is it possible to remove it? I first noticed the infection when running a program (not as root) messages flashed on the screen about transversing directories and such. The program (gimp) had been working fine since I downloaded the binary for gimp from their main

Shortly after I subscribed to this Samba list I started receiving numerous emails infected with the Swen/Gibe worm. Many of these emails contained the email addresses of Samba list members. I believe a subscriber of the Samba list has the Swen virus. Has anyone else on this list been getting emails infected with the Swen/Gibe worm? Please update your virus definitions and do a virus scan just to

Op 11/10/2016 om 10:05 AM schreef Teemu Huovila: > > On 09.11.2016 23:36, Brad Koehn wrote: >> I have discovered that many times the virus definitions I use for scanning messages (ClamAV, with the unofficial signatures http://sanesecurity.com/usage/linux-scripts/) are updated some time after my server has received an infected email. It seems the virus creators are trying to race the

Hello David, ----- Nachricht von David Pottage via dovecot <dovecot at dovecot.org> --------- Datum: Wed, 20 Feb 2019 14:56:51 +0000 Von: David Pottage via dovecot <dovecot at dovecot.org> Antwort an: David Pottage <david at chrestomanci.org> Betreff: Re: Virus scan + removal on a mdbox mail storage An: dovecot at dovecot.org > On 2019-02-20

Hi, I need advice on how virus scan and removal can be done on a _mdbox_ mail storage? On a maildir storage the virus scanner (e.g. clamav etc.) can detect and remove a email that is infected, since every email and attachment are stored in separate files. But in mdbox the emails and attachments are compressed together in one ore more mdbox-files ... I am anxious to convert my mail

Great, just received 9 virus emails in the past 24 hours from the asterisk list where people have had my address in their address book. Heads up people, it's an attachment, the text looks a little jingl'ish' why would you open it? Cheers, Dean -------------- next part -------------- An HTML attachment was scrubbed... URL:

It appears that someone has harvested email addresses from the S-news or one of the R lists and is sending out viruses. The mail does not come from the lists, but appears to come from people on these lists. (Closer examination of the headers indicates that it does not really come from the person indicated in the "from" field.) The mail is probably directed to people on these lists as

Antigen for Exchange found term_on_rekey_rq.patch infected with Unknown (?) virus. The file is currently Detected. The message, "terminate on re-key request (patch)", was sent from Marko Asplund and was discovered in SMTP Messages\Inbound located at Unknown/Unknown/MSMAIL.

Hi all, Last week we were infected with the Nimda virus. Our machines are clear now but I was wondering if there was a way in samba to stop .eml files being created on shares. As this virus spreads through shares on machines samba shares are vulnerable. Any ideas?? P.S. All of our e-mail is virused scanned, so no problem there ------------- Kristyan Osborne IT Technician Longhill High School

Hi, This may seem a fairly obvious question but I need to check it out. It's also fairly urgent so I apologise that I haven't made a good check of the FAQ's or mailing archives. We have a Solaris box with Samba installed. We are on a campus network where boxes that are infected are blocked from the network as a security measure. We have had our server blocked as it is probing port

Hi Collective users of Samba, (does has a nice ring to it eh?) Recently I found a my samba server being infected by win32 viruses. Though it does not affect the server in any way, I do find them to be an annoyance. I understand also that I can perform "veto" of files like *.exe in smb.conf but find that to be a wee bit restrictive. There are some users who stores valid executables in

I'm trying to get Dovecot (dovecot-0.99.10-6) to work with Eudora (6.0 mac/win) and am having a real problem when I try to enable SSL, either TLS or alternate-port SSL. Although my other mail clients, mail.app, imp, etc. work just fine, either version of Eudora craps out when trying to connect via TLS or SSL -- on the mac I get the error Could not get mailbox list. 20 [CLOSED]

I have used Eudora since v 1.35 (circa '93). For quite some time, I have enjoyed keeping each of my mail accounts' folders in totally separate directory trees. In Eudora you do this by specifying the data locatoin as part of the startup: '<program location>/eudora.exe <data location>' So I am quite spoiled. But there is no Eudora support in Linux/CentOS. So

Found while working on the retry filter. Swap the order of the two patches to see nbdkit ignore assertion failures with status 0. Eric Blake (2): server: Propagate unexpected nbdkit failure with --run tests: Enhance captive test server/captive.c | 43 ++++++++++++++++++++++++++++++---------- tests/test-captive.sh | 46 +++++++++++++++++++++++++++++++++++++++---- 2 files changed, 75

Hi! I am trying to install subj, on my Bubba miniserver, that runs Debian. I am stoped now with driver test: upsdrvctl start Network UPS Tools - UPS driver controller 2.0.4 Network UPS Tools - Megatec protocol driver 1.4 (2.0.4) Carlos Rodrigues (c) 2003-2006 Unable to open : No such file or directory Things to try: - Check 'port=' in ups.conf - Check owner/permissions of all

I'd like to propose we backport this to 1.18 and some earlier stable branches too. Rich.

Hello,     I'm sure it's a false positive but figured I post any way. My weekly full scan of my servers reported the following results. /root/samba-4.8.3/bin/default/source3/lib/netapi/examples/group/group_deluser.inst: Unix.Trojan.Vali-6606621-0 FOUND /root/samba-4.8.3/bin/default/source3/lib/netapi/examples/group/group_adduser.inst: Unix.Trojan.Vali-6606621-0 FOUND