[Samba] Virus found in sent message "A WinXP patch"

System Anti-Virus Administrator scanner at caldera.com
Thu Aug 1 13:01:02 GMT 2002


Attention: samba <samba at samba.org>.


A Virus was found in an Email message you sent. 
This Email scanner intercepted it and stopped the entire message
reaching it's destination. 

The Virus was reported to be: 

 the W32/Klez.h at MM virus !!!


Please update your virus scanner or contact your I.T. support 
personnel as soon as possible as you might have a virus on your system.


Your message was sent with the following envelope:

MAIL FROM: samba at samba.org
RCPT TO:   af at caldera.de 

... and with the following headers:

Received: from mail.t-intra.de (HELO mailc0910.dte2k.de) (62.156.147.75)by mail.ut.caldera.com with SMTP; 1 Aug 2002 19:58:50 -0000
from mailc0909.dte2k.de ([10.50.185.9]) by mailc0910.dte2k.de with Microsoft SMTPSVC(5.0.2195.4453);Thu, 1 Aug 2002 21:57:12 +0200
from sis-mail.sis-inspection.de ([217.89.78.58]) by mailc0909.dte2k.de with Microsoft SMTPSVC(5.0.2195.4453);Thu, 1 Aug 2002 21:56:36 +0200
from Qmkrv (pc-ew [192.168.100.37])by sis-mail.sis-inspection.de (8.11.2/8.11.2/SuSE Linux 8.11.1-0.5) with SMTP id g71JvSA22550for <af at caldera.de>; Thu, 1 Aug 2002 21:57:28 +0200
From: samba <samba at samba.org>
To: af at caldera.de
Subject: A  WinXP patch
Message-ID: <200208011957.g71JvSA22550 at sis-mail.sis-inspection.de>
Date: Thu, 1 Aug 2002 21:57:28 +0200



The original message is kept in:

  clavin.ut.caldera.com:/var/spool/qmailscan/quarantine

where the System Anti-Virus Administrator can further diagnose it.

The Email scanner reported the following when it scanned that message:

--- 

---uvscan results ---
/var/spool/qmailscan/clavin.ut.caldera.com102823193036110597/1554628_4204bc2dcd_1_.exe
        Found the W32/Klez.h at MM virus !!!
/var/spool/qmailscan/working/new/clavin.ut.caldera.com102823193036110597
        Found the W32/Klez.eml virus !!!

---




More information about the samba mailing list