Resolved Can´t delete a mail, when I delete, it appears again

[SalvadorS]

Server operating system version

Debian 12.5

Plesk version and microupdate number

18.0.61

Well, this is strange.

I have a client who tell me if he delete a mail the mail appears again. I check it on webmail and thunderbird and it`s true.

So I went to:

/var/qmail/mailnames/domain.com/account/Maildir/cur

List the mails and I found this:


-rw------- 1 popuser popuser 32945 may 29 10:07 '1716970060.M273685P384773.dv11,S=32945,W=33443:2,S'
-rw------- 1 popuser popuser 4727026 may 29 11:12 '1716973931.M4555P404500.dv11,S=4727026,W=4788444:2,S'
-rw------- 1 popuser popuser 46121 may 29 11:23 '1716974590.M15578P407600.dv11,S=46121,W=46819:2,S'
-rw------- 1 popuser popuser 46657 may 29 11:58 '1716976692.M94048P417807.dv11,S=46657,W=47737:2,'
-rw------- 1 popuser popuser 490386 may 29 11:32 '1716976884.M194845P347123.dv11,S=490386,W=496874:2,'

Last one is the mail we are talking about. I delete it:


rm -rf '1716976884.M194845P347123.dv11,S=490386,W=496874:2,'

And list mails again:

ls -l

-rw------- 1 popuser popuser 32945 may 29 10:07 '1716970060.M273685P384773.dv11,S=32945,W=33443:2,S'
-rw------- 1 popuser popuser 4727026 may 29 11:12 '1716973931.M4555P404500.dv11,S=4727026,W=4788444:2,S'
-rw------- 1 popuser popuser 46121 may 29 11:23 '1716974590.M15578P407600.dv11,S=46121,W=46819:2,S'
-rw------- 1 popuser popuser 46657 may 29 11:58 '1716976692.M94048P417807.dv11,S=46657,W=47737:2,'
-rw------- 1 popuser popuser 490386 may 29 11:32 '1716977209.M247669P347123.dv11,S=490386,W=496874:2,'

And you can see it again. A new one but same mail same hour same minute. I suspended the domain, deleted the mail, same thing...

So, any help to delete it?

Thanks in advance

 

[SalvadorS]

Hello,

If someone have this problem in the future the client has a troyan virus in his pc who recreated the mail.

Regards