saya mendapat warning dari virusalert server saya seperti dibawah ini, namun yang aneh adalah bahwa di server ini sebenarnya tidak ada nama user "smith" , kenapa ya clam anti virus ini mengirimkan seolah-olah ada email bervirus mengirimkannya ke user yang padahal user tsb tidak ada?? , selain nama smith juga ada beberapa nama lain lagi yg memang gak ada nama-nam tersebut
----- Original Message ----- From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, February 16, 2004 12:36 PM Subject: [SECURITY] VIRUS (Worm.SCO.A-dam) FROM <[EMAIL PROTECTED]> > A virus (Worm.SCO.A-dam) was found. > > Scanner detecting a virus: Clam Antivirus - clamscan > > The mail originated from: <[EMAIL PROTECTED]> > > According to the 'Received:' trace, the message originated at: > spln.co.id (mesin-15-26.ms.itb.ac.id [167.205.15.26]) > > The message WAS NOT delivered to: > <[EMAIL PROTECTED]>: > 550 5.7.1 Message content rejected, id=07647-09 - VIRUS: Worm.SCO.A-dam > > Virus scanner output: > /var/amavis/amavis-20040216T123100-07647/parts/part-00001: OK > /var/amavis/amavis-20040216T123100-07647/parts/part-00003: Worm.SCO.A-dam FOUND > > The message has been quarantined as: > /var/virusmails/virus-20040216-123626-07647-09 > > ------------------------- BEGIN HEADERS ----------------------------- > Return-Path: <[EMAIL PROTECTED]> > Received: from pln.co.id (mesin-15-26.ms.itb.ac.id [167.205.15.26]) > by tempo.co.id (Postfix) with ESMTP id B03A3427CC > for <[EMAIL PROTECTED]>; Mon, 16 Feb 2004 12:35:46 +0700 (WIT) > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: hi > Date: Sun, 19 Jan 2003 00:04:03 +0700 > MIME-Version: 1.0 > Content-Type: multipart/mixed; > boundary="----=_NextPart_000_0010_C7E447E8.75887B9C" > X-Priority: 3 > X-MSMail-Priority: Normal > Message-Id: <[EMAIL PROTECTED]> > -------------------------- END HEADERS ------------------------------ >
