A virus got through my server after 3 years?!!?

Rob Charles rob at thehostmasters.com
Wed Mar 3 21:04:06 GMT 2004


I think a virus got through...

here are the headers

there is an attachemner that i have not opened...

Why would this get through?? i never had a problem before... i use Macafee i
am on 4333 not sure what virus it is though??

------------------------------------
Return-Path: <info at thehostmaters.com>
Received: from tipe.utoronto.ca (tst15.tst.utoronto.ca [128.100.56.15])
 by localhost.localdomain (8.12.10/8.12.5) with SMTP id i23HdjsB029765
 for <info at thehostmasters.com>; Wed, 3 Mar 2004 12:39:45 -0500
Date: Wed, 03 Mar 2004 12:44:52 -0500
To: info at thehostmasters.com
Subject: Warning about your e-mail account.
From: noreply at thehostmasters.com
Message-ID: <doulyyfgdsxxkravmxj at thehostmasters.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="--------taojqrvqlobuwwcadujp"
X-MailScanner-Information: Please contact info at thehostmasters.com for more
info
X-MailScanner: Found to be clean
X-UIDL: Za&"!N#S"!)2N!!1#7!!

----------taojqrvqlobuwwcadujp
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hello user of Thehostmasters.com e-mail server,

Our antivirus software has  detected a large ammount of viruses  outgoing
from your email account, you  may use our  free anti-virus tool to clean up
your  computer software.

For  details  see  the attached file.

In  order to read the attach you have  to use  the following password:
38683.

The  Management,
   The  Thehostmasters.com team
http://www.thehostmasters.com

----------taojqrvqlobuwwcadujp
Content-Type: application/octet-stream; name="TextFile.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="TextFile.zip"

-------------------------------------------------------------------

Rob Charles
TheHostMasters
Montreal, Canada
514-846-0006
Rob at TheHostMasters.com
http://www.TheHostMasters.com



----- Original Message -----
From: "Peter Bonivart" <peter at UCGBOOK.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Wednesday, March 03, 2004 3:58 PM
Subject: Re: Food for thought


> Marco Obaid wrote:
> > Add to this, that most Desktop Antivirus solutions do hijack system
resources.
> > I have caught many users turning off the Antivirus because it "slows
down"
> > their machines. I do not blame them, because I have done this myself a
time or
> > two when I was working on complex project with so many screens open.
>
> The user of a workstation should not be logged on as an admin and the
> virus scanner should run as an admin so it can't be closed by the user.
>
> --
> /Peter Bonivart
>
> --Unix lovers do it in the Sun
>
> Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14,
> SpamAssassin 2.63 + DCC 1.2.30, ClamAV 0.67 + GMP 4.1.2
>



More information about the MailScanner mailing list