Any explanations gratefully recieved.

Shane Kelly s.kelly at ayrcoll.ac.uk
Wed Mar 20 11:00:16 GMT 2002


I got a call from a user who reported a virus in an email - this is such an 
unusual occurrence these days that I went personally to get the details.

The following are the headers from the email, and the log entry pertaining to 
it. Any thoughts ?
************************** Headers ******************************
Received: from mailscanner.ayrcoll.ac.uk ([192.168.10.16]) by 
homer.ayrcoll.ac.uk with SMTP (Microsoft Exchange Internet Mail Service 
Version 5.5.2650.21)
	id FKA69GK0; Tue, 19 Mar 2002 13:41:55 -0000
Received: from mercury.hol.gr (mercury.hol.gr [194.30.192.30])
	by mailscanner.ayrcoll.ac.uk (8.11.6/8.11.6) with SMTP id g2JDk3j13255
	for <a.mcghie at ayrcoll.ac.uk>; Tue, 19 Mar 2002 13:46:04 GMT
Received: (qmail 7229 invoked from network); 19 Mar 2002 13:42:44 -0000
Received: from vdp053.ath02.cas.hol.gr (HELO vmail.hol.gr) (195.97.117.54)
  by mercury.hol.gr with SMTP; 19 Mar 2002 13:42:44 -0000
Date: Tue, 19 Mar 2002 13:46:04 GMT
Message-Id: <200203191346.g2JDk3j13255 at mailscanner.ayrcoll.ac.uk>
FROM: Ksanthakos <lrc at avgerinopoulou.edu.gr>
SUBJECT: #_èr ,
]m04UoY2©ð7<«C¯9O©zMbY6k
X-MSMail-Priority: Normal
X-Priority: 3
X-Mailer: Microsoft Outlook Express 5.00.2919.6600
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_008C_016ED2E9.72E2E980"
Content-Transfer-Encoding: 7bit
X-MailScanner: Found to be clean
******************** /Headers ***************************************

******************** Log Entry **************************************
Mar 19 13:46:06 mailscanner sendmail[13255]: g2JDk3j13255: 
from=<lrc at avgerinopoulou.edu.gr>, size=128271, class=0, nrcpts=1, 
msgid=<200203191346.g2JDk3j13255 at mailscanner.ayrcoll.ac.uk>, 
bodytype=8BITMIME, proto=SMTP, daemon=MTA, relay=mercury.hol.gr 
[194.30.192.30]
********************/Log Entry***************************************

mailscanner is a mail gateway with mailscanner/sophos installation, the virus 
reported was magistra.

Any help gratefully received.

-- 
Shane Kelly
Network Controller
Ayr College
01292 265184
s.kelly at ayrcoll.ac.uk



More information about the MailScanner mailing list