Hosting Provided By

Re: [Clamav-users] FP?

From: Christoph Cordes <ib(at)precompiled.de>
Date: Mon Jul 02 2007 - 05:00:07 EDT

Am 02.07.2007 um 10:48 schrieb ClamAV List:

> Hi List,
>
> I had been monitor the mail server and notice that there are many
> error like
> the one below.
>
> @400000004688b95a3983c334 CHKUSER accepted rcpt: from
> <purchase@email.com:purchase@email.com:> remote <RND1:unknown:
> 202.142.86.69>
> rcpt <sales@email.com> : found existing recipient
> @400000004688b95c228fd8d4 simscan:[18912]:VIRUS
> DROPPED:
> 1.3274s:Exploit.Iframe-1:202.142.86.69:purchase@email.com:sales@email.
> com
> @400000004688b95d07afbc3c tcpserver: end 18912 status 0
>
> These emails are send via Outlook Express using Rich Text. There is no
> attachment, just text. But if i just Plain text format, emails are
> been
> delivered.
>

The answer is 42.

Alternative answer:

Please provide a sample of the mail, so i can have a look. A snippet from a logfile does not really help. Thank you.

-- 
Best regards,
   Christoph


_______________________________________________
Help us build a comprehensive ClamAV guide: visit 
http://wiki.clamav.nethttp://lurker.clamav.net/list/clamav-users.html

Received on Mon Jul 2 04:57:14 2007

This message: [ Message body ]
Next message: BG Mahesh: "Re: [Clamav-users] What is infected attachment (Email.Phishing.RB-827)?"
Previous message: ClamAV List: "[Clamav-users] FP?"
In reply to: ClamAV List: "[Clamav-users] FP?"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Mon Jul 02 2007 - 05:00:05 EDT