K
kuhle
Guest
In the last 2 hrs, there are about 5 emails every second which are coming through, and I think that some Spamemr must have sent the Reply To: address as [email protected] possibly. Please HELP me to try and stop what is going on:
Email type 1:
Subject: [psmon/plesk.mydomain.com] Failed to spawn 'clamd' with '/sbin/service clamd restart'
Body:
Email type 2:
Subject: [psmon/plesk.expat-email.co.uk] Spawned 'couriertcpd' with '/sbin/service courier-imap restart'
Body:
Email type 3:
Subject: failure notice;
Body:
Email type 4:
Subject: A message has not been checked due to license limitations
Email Type 5
From: DrWeb-DAEMON [[email protected]]
To: System Administrator ([email protected])
Can ANYONE help with what this might be and how to stop it?? PEASE!
Email type 1:
Subject: [psmon/plesk.mydomain.com] Failed to spawn 'clamd' with '/sbin/service clamd restart'
Body:
Command executed: /sbin/service clamd restart Exit value: 1 Signal number: 0 Dumped core?: 0
Stopping Clam AntiVirus Daemon: [FAILED] Starting Clam AntiVirus Daemon: [FAILED]
Email type 2:
Subject: [psmon/plesk.expat-email.co.uk] Spawned 'couriertcpd' with '/sbin/service courier-imap restart'
Body:
Command executed: /sbin/service courier-imap restart Exit value: 0 Signal number: 0 Dumped core?: 0
Stopping Courier-IMAP server:
Stopping imap [ OK ] Stopping imap-ssl [ OK ] Stopping pop3 [ OK ] Stopping pop3-ssl [ OK ]
Starting Courier-IMAP server:
Starting imapd [ OK ] Starting imap-ssl [ OK ] Starting pop3 [ OK ] Starting pop3-ssl [ OK ]
Email type 3:
Subject: failure notice;
Body:
Hi. This is the qmail-send program at plesk.mydomain.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<[email protected]>:
./Maildir: No such file or directory
--- Below this line is a copy of the message.
Return-Path: <[email protected]>
Received: (qmail 30536 invoked by uid 110); 12 Nov 2008 17:06:56 +0000
Date: 12 Nov 2008 17:06:56 +0000
Message-ID: <[email protected]>
From: "DrWeb-DAEMON" <[email protected]>
To: "System Administrator" <[email protected]>
Subject: A message has not been checked due to license limitations
Content-Type: multipart/mixed;
boundary="001-DrWeb-MailFilter-Notification"
MIME-Version: 1.0
Precedence: junk
X-Antivirus-Ticket: DrWeb notification.
--001-DrWeb-MailFilter-Notification
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Dear Postmaster,
the message with following attributes has not been checked due to the licenses limitation.
Sender = (may be forged)
Recipients = [email protected]
Subject = failure notice
Message-ID = [unknown-id]
--- Dr.Web report ---
Dr.Web detailed report:
127.0.0.1 [16226] drweb.tmp.WYiOQE - message's envelope (addresses) aren't present in license (protected e-mail`s), skipped!
--- Dr.Web report ---
--001-DrWeb-MailFilter-Notification
Content-Type: text/rfc822-headers
Content-Transfer-Encoding: 7bit
Delivered-To: [email protected]
Received: (qmail 16590 invoked for bounce); 12 Nov 2008 14:45:23 +0000
Date: 12 Nov 2008 14:45:23 +0000
From: [email protected]
To: [email protected]
Subject: failure notice
--001-DrWeb-MailFilter-Notification--
Email type 4:
Subject: A message has not been checked due to license limitations
Dear Postmaster,
the message with following attributes has not been checked due to the licenses limitation.
Sender = [email protected] (may be forged) Recipients = [email protected] Subject = The antivirus software failure Message-ID = <[email protected]>
--- Dr.Web report ---
Dr.Web detailed report:
127.0.0.1 [16227] drweb.tmp.MPoVeh - message's envelope (addresses) aren't present in license (protected e-mail`s), skipped!
--- Dr.Web report ---
Email Type 5
From: DrWeb-DAEMON [[email protected]]
To: System Administrator ([email protected])
Dear Postmaster,
the message with following attributes has not been checked due to the licenses limitation.
Sender = [email protected] (may be forged) Recipients = [email protected] Subject = The antivirus software failure Message-ID = <[email protected]>
--- Dr.Web report ---
Dr.Web detailed report:
127.0.0.1 [16225] drweb.tmp.N7tiAX - message's envelope (addresses) aren't present in license (protected e-mail`s), skipped!
--- Dr.Web report ---
Can ANYONE help with what this might be and how to stop it?? PEASE!