—– BEGIN HEADERS —————————–
Return-Path:
Received: from Pnd (mdig144.ibw.com.ni [64.110.119.148])
by fh.ibw.com.ni (8.11.6/8.11.6) with SMTP id g5NMniA03427
for ; Sun, 23 Jun 2002 16:49:46 -0600 (GMT)
Date: Sun, 23 Jun 2002 16:49:46 -0600 (GMT)
Message-Id:
From: inet
To: [email protected]
Subject:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=V18yIFcia89vd
————————– END HEADERS ——————————
From [email protected] Sun Jun 23 16:31:14 2002 -0600
Status:
X-Status:
X-Keywords:
Return-Path:
Received: from maderas.ibw.com.ni (maderas1.ibw.com.ni [200.30.36.35])
by sprintvf.ibw.com.ni (8.11.6/8.10.1) with ESMTP id g5NMVEU22844
for ; Sun, 23 Jun 2002 16:31:14 -0600 (CST)
Received: (from root@localhost)
by maderas.ibw.com.ni (8.11.6/8.11.6) id g5NMVD619566;
Sun, 23 Jun 2002 16:31:13 -0600 (GMT)
Date: Sun, 23 Jun 2002 16:31:13 -0600 (GMT)
From: [email protected]
Message-Id:
To: [email protected]
Subject: FOUND VIRUS IN MAIL from [email protected]
A virus was found in an email from:
The message was addressed to:
The message has been quarantined as:
/var/virusmails/virus-20020623-163113-19553
Here is the output of the scanner:
Scanning /var/amavis/amavis-14357707/parts/*
Scanning file /var/amavis/amavis-14357707/parts/msg-19553-1.html
/var/amavis/amavis-14357707/parts/msg-19553-1.html
Found application Exploit-MIME.gen.b.
Scanning file /var/amavis/amavis-14357707/parts/msg-19553-2.wav
/var/amavis/amavis-14357707/parts/msg-19553-2.wav
Found the W32/Klez.h@MM virus !!!
Scanning file /var/amavis/amavis-14357707/parts/msg-19553-3.txt
Scanning file /var/amavis/amavis-14357707/parts/email.txt
/var/amavis/amavis-14357707/parts/email.txt
Found the W32/Klez.eml virus !!!
Scanning file /var/amavis/amavis-14357707/parts/part-00001
/var/amavis/amavis-14357707/parts/part-00001
Found virus or variant W32/Klez !!!
Scanning file /var/amavis/amavis-14357707/parts/part-00002
/var/amavis/amavis-14357707/parts/part-00002
File too small to have a known virus.
Summary report on /var/amavis/amavis-14357707/parts/*
File(s)
Total files: ……….. 6
Clean: …………….. 3
Possibly Infected: ….. 3
Here are the headers:
————————- BEGIN HEADERS —————————–
Return-Path:
Received: from Perky.CandW.ky (IDENT:[email protected] [209.27.52.51])
by maderas.ibw.com.ni (8.11.6/8.11.6) with ESMTP id g5NMV6f19
