info on detected viruses

[Martin Hepworth]

Simon

depends on what options you've got set in MailScanner.conf...


--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Simon Something wrote:
> Hi,
> 
> this is the Mailscanner email which had virus and was detected by
> mailscanner and has been forwared to me as i am the postmaster.
> 
> Now I would like to know the following
> 
> Is this infected mail delivered to the recipent
> or
> is it cleaned and deleivered or is this mail rejected by mail scanner
> or it is quaratined .
> 
> appreciate if u could help me
> 
> thanks n regards
> 
> simon (admin)
> 
> 
> 
> 
> 
> --------------------- first email log to postmaster -----------------
> 
> 
> The following e-mail messages were found to have viruses in them:
> 
>     Sender: deenaelalfy at hotmail.com
> IP Address: 62.150.129.170
>  Recipient: zaidk at kmun.gov.kw
>    Subject: stolen
>  MessageID: i2HAHTPg015487
>     Report: ClamAV: ranking.zip contains Worm.SomeFool.Gen-2
>             ClamAV: ranking.scr contains Worm.SomeFool.Gen-2
>             MailScanner: Windows Screensavers are often used to hide viruses
> (ranking.scr)
>     Report: ClamAV: ranking.scr contains Worm.SomeFool.Gen-2
>             MailScanner: Windows Screensavers are often used to hide viruses
> (ranking.scr)
> 
> Full headers are:
> 
>  Return-Path: <g>
>  Received: from kmun.gov.kw ([62.150.129.170])
>          by kmun.gov.kw (8.12.5/8.12.5) with SMTP id i2HAHTPg015487
>          for <zaidk at kmun.gov.kw>; Wed, 17 Mar 2004 13:17:30 +0300
>  Message-Id: <200403171017.i2HAHTPg015487 at kmun.gov.kw>
>  From: deenaelalfy at hotmail.com
>  To: zaidk at kmun.gov.kw
>  Subject: stolen
>  Date: Wed, 17 Mar 2004 12:50:01 +0300
>  MIME-Version: 1.0
>  Content-Type: multipart/mixed; boundary="53526648"
> 
> 

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************