• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Question Plesk KAV 12.5.30 warning emails: get full headers?

Azendale

New Pleskian
First off, here's the version and platform:
12.5.30 Ubuntu 14.04 1205160608.09

I keep getting emails telling me that KAV has found a virus:


From: "Parallels Panel KAV" <[email protected]>
To: "System Administrator" <[email protected]>
Subject: A trojan has been detected !

Dear System Administrator,

A message with the following attributes was not delivered because it contains an infected object.

Sender = [email protected] (may be forged)
Recipients = [email protected]
Subject = Wrong model
Message-ID = <[email protected]>

--- Antivirus report ---
The following trojan was found:
Trojan-Downloader.JS.Agent.mwp
Detected threat is highly dangerous
--- Antivirus report ---

--------------------------------------------
Date: Wed, 26 Oct 2016 01:19:42 -0400
To: [email protected]
From: "Saundra Burke" <[email protected]>
Reply-To: "Saundra Burke" <[email protected]>
Subject: Wrong model
Message-ID: <[email protected]>
X-Priority: 3
X-Mailer: PHPMailer 5.2.2 (http://code.google.com/a/apache-extras.org/p/phpmailer/)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="b1_14c31dd737eeaf973ac9892983dff5b1"
--010-KAV-Handler--


With the level of information that these warnings give, I don't see how to take any action on this. I don't have the received headers I would need to know for sure where it's from.

Normally, I get one of these every couple of weeks.

But the botnets/spammers are doing a run, and I'm getting about 100 of these a day.

How can I either turn this notification off, or configure it to send the full headers, or go find the offending message file myself?
 
Back
Top