> 
> Coba berikan mail header dari message notification tersebut kesini, dan
> periksa transaksi mailnya di content filter log dan antivirus log.
> 
Dear Pak Syafril , berikut saya lampirkan mail header.

Rupanya setelah saya melihat inbox user tersebut , bahwa pesan tersebut berupa 
notifikasi pemberitahuan dari hasil scan oleh security plus kemudian dimasukkan 
ke dalam body email. Hal ini terjadi setelah saya mengaktifkan opsi " add 
warning to top of message body if not scanned.

Demi kenyamanan user , opsi tersebut saya non aktifkan kembali karena saya 
menemukan kadang security dapat membaca file .rar yang telah diberikan password 
dan kadang tidak dapat. 

  

X-MDAV-Result: infected
X-MDAV-Infected: 130315.rar, Pinjaman
X-MDAV-Processed: mail.victoriabank.co.id, Mon, 16 Mar 2015 07:45:46 +0700
Return-path: <[email protected]>
Authentication-Results: mail.victoriabank.co.id
        auth=pass (login) [email protected]
Received: from bvicsmhbms01 by mail.victoriabank.co.id 
        with ESMTPA id 60-md50000016796.msg for <[email protected]>;
        Mon, 16 Mar 2015 07:45:44 +0700
X-Spam-Processed: mail.victoriabank.co.id, Mon, 16 Mar 2015 07:45:44 +0700
        (not processed: message from trusted or authenticated source)
X-MDHelo: bvicsmhbms01
X-MDArrival-Date: Mon, 16 Mar 2015 07:45:44 +0700
X-Authenticated-Sender: [email protected]
X-Rcpt-To: [email protected]
X-MDRcpt-To: [email protected]
X-Return-Path: [email protected]
X-Envelope-From: [email protected]
X-MDaemon-Deliver-To: [email protected]
From: "Ardian" <[email protected]>
To: "'Lidiya Cahyani'" <[email protected]>
Cc: "'Franklin Theodorus'" <[email protected]>,
        "'Purwoko'" <[email protected]>
Subject: MDaemon Warning - not scanned: Data o/s pinjaman 130315
Date: Mon, 16 Mar 2015 07:48:07 +0700
Message-ID: 
<!&!AAAAAAAAAAAYAAAAAAAAADCBiXK95rpPlU1mVwN4NRrCgAAAEAAAAPbaUKQ6biVJqS6Eiu3a3oIBAAAAAA==@victoriabank.co.id>
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="----=_NextPart_000_002C_01D05FBD.8D85D3C0"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AdBfgo/uZryvtzP+Q0G8QJommJILYw==
Content-Language: en-us
x-cr-hashedpuzzle: CAxi FvY/ GFFU HApp Jkai KGnS MPHp N2mb Q+dv SdhW WfLO aQeh 
bOfj c7bV g7aV 
iJP2;3;ZgByAGEAbgBrAGwAaQBuAEAAdgBpAGMAdABvAHIAaQBhAGIAYQBuAGsALgBjAG8ALgBpAGQAOwBsAGkAZABpAHkAYQBAAHYAaQBjAHQAbwByAGkAYQBiAGEAbgBrAC4AYwBvAC4AaQBkADsAcAB1AHIAdwBvAGsAbwBAAHYAaQBjAHQAbwByAGkAYQBiAGEAbgBrAC4AYwBvAC4AaQBkAA==;Sosha1_v1;7;{D71CBB32-4673-4BF4-8D51-22AD0ED5B4AA};YQByAGQAaQBhAG4AQAB2AGkAYwB0AG8AcgBpAGEAYgBhAG4AawAuAGMAbwAuAGkAZAA=;Mon,
 16 Mar 2015 00:45:55 
GMT;RABhAHQAYQAgAG8ALwBzACAAcABpAG4AagBhAG0AYQBuACAAMQAzADAAMwAxADUA
x-cr-puzzleid: {D71CBB32-4673-4BF4-8D51-22AD0ED5B4AA}
Disposition-Notification-To: "Ardian" <[email protected]>



X-MDAV-Result: infected
X-MDAV-Infected: Raw
X-MDAV-Processed: mail.victoriabank.co.id, Mon, 16 Mar 2015 07:45:38 +0700
Return-path: <[email protected]>
Authentication-Results: mail.victoriabank.co.id
        auth=pass (login) [email protected]
Received: from bvicsmhbms01 by mail.victoriabank.co.id 
        with ESMTPA id 55-md50000016798.msg for <[email protected]>;
        Mon, 16 Mar 2015 07:45:33 +0700
X-Spam-Processed: mail.victoriabank.co.id, Mon, 16 Mar 2015 07:45:33 +0700
        (not processed: message from trusted or authenticated source)
X-MDHelo: bvicsmhbms01
X-MDArrival-Date: Mon, 16 Mar 2015 07:45:33 +0700
X-Authenticated-Sender: [email protected]
X-Rcpt-To: [email protected]
X-MDRcpt-To: [email protected]
X-Return-Path: [email protected]
X-Envelope-From: [email protected]
X-MDaemon-Deliver-To: [email protected]
From: "Ardian" <[email protected]>
To: <[email protected]>,
        <[email protected]>
Cc: "'Purwoko'" <[email protected]>
Subject: MDaemon Warning - not scanned: Data raw gl 130315
Date: Mon, 16 Mar 2015 07:44:43 +0700
Message-ID: 
<!&!AAAAAAAAAAAYAAAAAAAAADCBiXK95rpPlU1mVwN4NRrCgAAAEAAAAFtcD+hD9v1LlK/[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="----=_NextPart_000_0011_01D05FBD.117AC2E0"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AdBfgj8qQAeVMvn4TCGdAvxkwMuudQ==
Content-Language: en-us
x-cr-hashedpuzzle: FfFo MWS4 MqVG Oc8V PMe6 PV3d SDzZ T7E4 U3mz Wqzv XAOp YaRQ 
YdNL Z8ct dGrW 
fmj5;3;ZQBrAG8AZwBpAG4AZABvAEAAdgBpAGMAdABvAHIAaQBhAGIAYQBuAGsALgBjAG8ALgBpAGQAOwBlAGsAbwBnAGkAbgBkAG8AQAB5AGEAaABvAG8ALgBjAG8AbQA7AHAAdQByAHcAbwBrAG8AQAB2AGkAYwB0AG8AcgBpAGEAYgBhAG4AawAuAGMAbwAuAGkAZAA=;Sosha1_v1;7;{EF4A40E2-1DD0-4534-945B-6F7E24840FD6};YQByAGQAaQBhAG4AQAB2AGkAYwB0AG8AcgBpAGEAYgBhAG4AawAuAGMAbwAuAGkAZAA=;Mon,
 16 Mar 2015 00:43:40 GMT;RABhAHQAYQAgAHIAYQB3ACAAZwBsACAAMQAzADAAMwAxADUA
x-cr-puzzleid: {EF4A40E2-1DD0-4534-945B-6F7E24840FD6}
Disposition-Notification-To: "Ardian" <[email protected]>

--
--[MDaemon-L]------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: http://www.netmeister.org/news/learn2quote
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 15.0, SP 4.5, BES 2.0.2, OC 3.0, SG 3.0.2

Kirim email ke