Dear Pak Syafril,

Saat ini kami menggunakan Mdaemon versi 23.0.2, dengan Mdaemon antivirus
versi 23.0.2,
Kami ada case setiap ada template dokumen pelaman selalu terblok dengan
pesan "*  Message scanned by (IKARUS: infected (0.00782s)) (ClamAV: clean
(0.28771s)) is infected with Trojan.IframeRef"
Saya coba download file nya dan scan menggunakan Kaspersky end point
security dengan update per hari ini namun hasilnya tidak terdeteksi sebagai
virus.

Berikut full log smtp-in nya Pak
Mon 2023-11-06 14:42:55.053: 01: ----------
Mon 2023-11-06 14:42:49.378: 05: [02744671] Session 02744671; child 0020
Mon 2023-11-06 14:42:49.378: 05: [02744671] Accepting SMTP connection from
36.64.10.242:50032 to 172.30.2.2:587
Mon 2023-11-06 14:42:49.379: 03: [02744671] --> 220 mail.fastratabuana.co.id
ESMTP MSA MDaemon 23.0.2; Mon, 06 Nov 2023 14:42:49 +0700
Mon 2023-11-06 14:42:49.522: 02: [02744671] <-- EHLO IT03
Mon 2023-11-06 14:42:49.522: 03: [02744671] --> 250-mail.fastratabuana.co.id
Hello IT03 [36.64.10.242], pleased to meet you
Mon 2023-11-06 14:42:49.522: 03: [02744671] --> 250-AUTH LOGIN CRAM-MD5
PLAIN
Mon 2023-11-06 14:42:49.522: 03: [02744671] --> 250-8BITMIME
Mon 2023-11-06 14:42:49.522: 03: [02744671] --> 250-ENHANCEDSTATUSCODES
Mon 2023-11-06 14:42:49.522: 03: [02744671] --> 250-PIPELINING
Mon 2023-11-06 14:42:49.522: 03: [02744671] --> 250-CHUNKING
Mon 2023-11-06 14:42:49.522: 03: [02744671] --> 250-STARTTLS
Mon 2023-11-06 14:42:49.522: 03: [02744671] --> 250 SIZE
Mon 2023-11-06 14:42:49.561: 02: [02744671] <-- AUTH LOGIN
Mon 2023-11-06 14:42:49.561: 03: [02744671] --> 334 VXNlcm5hbWU6
Mon 2023-11-06 14:42:49.569: 02: [02744671] <-- ZGFuaWVsQGthcGFsYXBpLmNvLmlk
Mon 2023-11-06 14:42:49.569: 03: [02744671] --> 334 UGFzc3dvcmQ6
Mon 2023-11-06 14:42:49.577: 02: [02744671] <-- ******
Mon 2023-11-06 14:42:49.577: 01: [02744671] Authenticating
[email protected]...
Mon 2023-11-06 14:42:49.578: 01: [02744671] Authenticated as
[email protected]
Mon 2023-11-06 14:42:49.578: 03: [02744671] --> 235 2.7.0 Authentication
successful
Mon 2023-11-06 14:42:49.636: 02: [02744671] <-- MAIL FROM:
<[email protected]>
Mon 2023-11-06 14:42:49.637: 03: [02744671] --> 250 2.1.0 Sender OK
Mon 2023-11-06 14:42:49.645: 02: [02744671] <-- RCPT TO:
<[email protected]>
Mon 2023-11-06 14:42:49.646: 03: [02744671] --> 250 2.1.5 Recipient OK
Mon 2023-11-06 14:42:49.654: 02: [02744671] <-- DATA
Mon 2023-11-06 14:42:49.655: 03: [02744671] --> 354 Enter mail, end with
<CRLF>.<CRLF>
Mon 2023-11-06 14:42:50.248: 01: [02744671] Message size: 99767 bytes
Mon 2023-11-06 14:42:50.249: 06: [02744671] Passing message through
AntiVirus (Size: 99767)...
Mon 2023-11-06 14:42:50.558: 06: [02744671] *  Message scanned by (IKARUS:
infected (0.00782s)) (ClamAV: clean (0.28771s)) is infected with
Trojan.IframeRef
Mon 2023-11-06 14:42:50.558: 06: [02744671] ---- End AntiVirus results
Mon 2023-11-06 14:42:50.558: 04: [02744671] Message refused because it
contains a virus
Mon 2023-11-06 14:42:50.558: 03: [02744671] --> 550 5.6.0 Sorry, virus
detected within message
Mon 2023-11-06 14:42:55.370: 02: [02744671] <-- QUIT
Mon 2023-11-06 14:42:55.370: 03: [02744671] --> 221 2.0.0 See ya in
cyberspace
Mon 2023-11-06 14:42:55.370: 04: [02744671] SMTP session terminated (Bytes
in/out: 99924/527)
Mon 2023-11-06 14:42:55.370: 01: ----------

mohon tanggapan terkait hal ini Pak.

Terimakasih,
Asep. Y


-- 
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.com
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir: MDaemon 23.5.0, SecurityGateway 9.5.0


Kirim email ke