Ahh.. I have notifications turned off at the virus scanning mail server. If I check the logs, I bet there is a heap of Sobig.F from this sender.
Shane >-----Original Message----- >From: Chris Pugh [mailto:[EMAIL PROTECTED] >Sent: Tuesday, 9 September 2003 9:43 AM >To: [EMAIL PROTECTED] >Subject: [vchkpw] Message to ALL Was Shane's: Re: [vchkpw] FW: >failure notice > > >Looks like I was right after all about those messages >Shane .. still coming they are... and look what turned >up .. > >============================================= >Scan result: Virus [EMAIL PROTECTED] found. >============================================== > >Please ref: > >http://www.symantec.com/avcenter/venc/data/[EMAIL PROTECTED] > >Told you I was receiving rubbish responses. > >Watch out all! > >Regards, > > >Chris. > >--- Shane Chrisp <[EMAIL PROTECTED]> wrote: >> Can we either get cz at neospire dot net to fix the >> procmail/preline error >> or get them unsub'd from the list. These bounces are >> getting very annoying. >> >> Shane >> >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] >> Sent: Monday, 8 September 2003 10:30 PM >> To: [EMAIL PROTECTED] >> Subject: failure notice >> >> >> Hi. This is the qmail-send program at >> lump.internal.neospire.net. >> I'm afraid I wasn't able to deliver your message to >> the following addresses. >> This is a permanent error; I've given up. Sorry it >> didn't work out. >> >> <[EMAIL PROTECTED]>: >> preline: fatal: unable to run procmail: file does >> not exist >> >> --- Below this line is a copy of the message. >> >> Return-Path: <[EMAIL PROTECTED]> >> Received: (qmail 9160 invoked from network); 8 Sep >> 2003 14:30:10 -0000 >> Received: from unknown (HELO localhost) (127.0.0.1) >> by lump with SMTP; 8 Sep 2003 14:30:10 -0000 >> Received: from mail.neospire.net [66.111.111.18] >> by localhost with POP3 (fetchmail-6.2.2) >> for [EMAIL PROTECTED] (single-drop); Mon, 08 Sep 2003 >> 09:30:10 -0500 >> (CDT) >> Received: from ns1.inter7.com [209.218.8.2] by >> mail.neospire.net >> (SMTPD32-5.05) id A10E10660048; Mon, 08 Sep 2003 >> 09:24:14 -0500 >> Received: (qmail 30521 invoked by uid 511); 8 Sep >> 2003 15:38:47 -0000 >> Mailing-List: contact [EMAIL PROTECTED]; run by >> ezmlm >> Precedence: bulk >> List-Post: <mailto:[EMAIL PROTECTED]> >> List-Help: <mailto:[EMAIL PROTECTED]> >> List-Unsubscribe: >> <mailto:[EMAIL PROTECTED]> >> List-Subscribe: <mailto:[EMAIL PROTECTED]> >> Delivered-To: mailing list [EMAIL PROTECTED] >> Received: from unknown (HELO droopy.2000cn.com.au) >> (202.154.116.2) >> by evanston.inter7.com with SMTP; 8 Sep 2003 >> 15:38:46 -0000 >> Reply-To: <[EMAIL PROTECTED]> >> From: "Shane Chrisp" <[EMAIL PROTECTED]> >> To: <[EMAIL PROTECTED]> >> Date: Mon, 8 Sep 2003 22:24:01 +0800 >> Organization: 2000 Computers & Networks >> Message-ID: >> <[EMAIL PROTECTED]> >> MIME-Version: 1.0 >> Content-Type: text/plain; >> charset="US-ASCII" >> Content-Transfer-Encoding: 7bit >> X-Priority: 3 (Normal) >> X-MSMail-Priority: Normal >> X-Mailer: Microsoft Outlook, Build 10.0.4510 >> In-Reply-To: <[EMAIL PROTECTED]> >> X-MimeOLE: Produced By Microsoft MimeOLE >> V6.00.2800.1165 >> Importance: Normal >> Subject: RE: [vchkpw] Hacked machine >> X-RCPT-TO: <[EMAIL PROTECTED]> >> X-UIDL: 1634 >> Status: U >> >> And if your using a mysql backend, dump the db >> aswell :) >> >> >-----Original Message----- >> >From: Rick Macdougall [mailto:[EMAIL PROTECTED] >> >Sent: Monday, 8 September 2003 10:17 PM >> >To: Widmer Hannes >> >Cc: vpopmail list >> >Subject: Re: [vchkpw] Hacked machine >> > >> > >> >Hi, >> > >> > >> >Widmer Hannes wrote: >> > >> >> Hello List >> >> >> >> >> >> I have a hacked machine and I have to reinstall >> this one tonight. >> >> Now, my short question is, what the best way is >> to >> >> backup / restore user's mailboxes. Is it enought >> if I only macke >> >> a copy of my vpopmail/domains dir ?..... >> > >> >/pathto/vpopmail/domains/* >> >/pathto/qmail/control/* >> >/pathto/qmail/users/* >> > >> >One gotcha is the uid and gid in >> /pathto/qmail/users/assign, make sure >> >it matches vpopmail.vchkpw >> > >> >Regards, >> > >> >Rick >> > >> > >> > >> > >> > >> >> >> >> >> > > >__________________________________ >Do you Yahoo!? >Yahoo! SiteBuilder - Free, easy-to-use web site design software >http://sitebuilder.yahoo.com > > >
