TEST 1: W32/Mimail@MM original: detected but passed thru!!! Aug 1 19:49:21 alerce2-or Alerce-MX[22271]: New Batch: Scanning 1 messages, 30229 bytes Aug 1 19:49:21 alerce2-or Alerce-MX[22271]: Spam Checks: Starting Aug 1 19:49:22 alerce2-or Alerce-MX[22271]: Message 1221616 from 200.22.33.162 (baby@baby.com.ar) to example.com is spam, Alerce-SpamAnalista (puntaje=8.5, requerido 6, BAYES_30, FORGED_MUA_THEBAT, NO_REAL_NAME, SUBJ_HAS_SPACES, SUBJ_HAS_UNIQ_ID) Aug 1 19:49:22 alerce2-or Alerce-MX[22271]: Spam Checks: Found 1 spam messages Aug 1 19:49:22 alerce2-or Alerce-MX[22271]: Spam Actions: message 1221616 actions are deliver Aug 1 19:49:22 alerce2-or Alerce-MX[22271]: Virus and Content Scanning: Starting Aug 1 19:49:22 alerce2-or Alerce-MX[22271]: McAfee said "/app/mailScanner-4.20-3/var/incoming/22271/1221616/message.zip" Aug 1 19:49:22 alerce2-or Alerce-MX[22271]: McAfee said " Found the W32/Mimail@MM virus !!!" Aug 1 19:49:22 alerce2-or Alerce-MX[22271]: /app/mailScanner-4.20-3/var/incoming/22271/1221616/message.zip Found the W32/ Mimail@MM virus !!! Aug 1 19:49:22 alerce2-or Alerce-MX[22271]: Virus Scanning: McAfee found 1 infections Aug 1 19:49:22 alerce2-or Alerce-MX[22271]: Virus Scanning: Found 1 viruses Aug 1 19:49:22 alerce2-or Alerce-MX[22271]: Filename Checks: Allowing message.zip Aug 1 19:49:22 alerce2-or Alerce-MX[22271]: Filename Checks: Allowing msg-22271-73.txt Aug 1 19:49:22 alerce2-or Alerce-MX[22271]: ZM: message 1221616 renamed into 1156463 Aug 1 19:49:22 alerce2-or Alerce-MX[22271]: Uninfected: Delivered 1 messages MSG:2003:08:01-19:49:22 1221616:1156463 30229 baby@baby.com.ar baby.com.ar your account bajbpdap 200.22.33.162 1 0 8.5 spam, Alerce-SpamAnalista (puntaje=8.5, requerido 6, BAYES_30, FORGED_MUA_THEBAT, NO_REAL_NAME, SUBJ_HAS_SPACES, SUBJ_HAS_UNIQ_ID) TO :1221616:1156463 mabsatz@example.com example.com X-Alerce: Se encontro limpio X-Alerce-SpamAnalisis: spam, Alerce-SpamAnalista (puntaje=8.5, requerido 6, BAYES_30, FORGED_MUA_THEBAT, NO_REAL_NAME, SUBJ_HAS_SPACES, SUBJ_HAS_UNIQ_ID) X-Alerce-PuntajeSpam: AAAAAAAA TEST 2: W32/Hybris.gen@MM original: detected and replaced by AvisoDeVirus.txt (VirusWarning.txt) Aug 1 20:01:48 alerce2-or Alerce-MX[26442]: New Batch: Scanning 1 messages, 33506 bytes Aug 1 20:01:48 alerce2-or Alerce-MX[26442]: Spam Checks: Starting Aug 1 20:01:49 alerce2-or Alerce-MX[26442]: Virus and Content Scanning: Starting Aug 1 20:01:49 alerce2-or Alerce-MX[26442]: McAfee said "/app/mailScanner-4.20-3/var/incoming/26442/1221616/enano porno.exe" Aug 1 20:01:49 alerce2-or Alerce-MX[26442]: McAfee said " Found the W32/Hybris.gen@MM virus !!!" Aug 1 20:01:49 alerce2-or Alerce-MX[26442]: /app/mailScanner-4.20-3/var/incoming/26442/1221616/enano porno.exe Found the W32/Hybris.gen@MM virus !!! Aug 1 20:01:49 alerce2-or Alerce-MX[26442]: Virus Scanning: McAfee found 1 infections Aug 1 20:01:49 alerce2-or Alerce-MX[26442]: Virus Scanning: Found 1 viruses Aug 1 20:01:49 alerce2-or Alerce-MX[26442]: Filename Checks: Windows/DOS Executable (enano porno.exe) Aug 1 20:01:49 alerce2-or Alerce-MX[26442]: Filename Checks: Allowing msg-26442-19.txt Aug 1 20:01:49 alerce2-or Alerce-MX[26442]: Other Checks: Found 1 problems Aug 1 20:01:49 alerce2-or Alerce-MX[26442]: ZM: message 1221616 renamed into 1156463 Aug 1 20:01:49 alerce2-or Alerce-MX[26442]: Cleaned: Delivered 1 cleaned messages MSG:2003:08:01-20:01:49 1221616:1156463 33506 baby@baby.com.ar baby.com.ar Enanito si, pero con que pedazo! 200.22.33.162 0 0 1.7 no es spam, Alerce-SpamAnalista (puntaje=1.7, requerido 6, MICROSOFT_EXECUTABLE, TO_MALFORMED) TO :1221616:1156463 mabsatz@example.com example.com RPT:1221616:1156463 enano porno.exe Executable DOS/Windows programs are dangerous in email (enano porno.exe) X-Alerce: Se encontro infectado X-Alerce-SpamAnalisis: no es spam, Alerce-SpamAnalista (puntaje=1.7, requerido 6, MICROSOFT_EXECUTABLE, TO_MALFORMED) X-Alerce-PuntajeSpam: A TEST 3: W32/Hybris.gen@MM handsent inside a .zip: detected and replaced by "Replaced Infected File.txt" Aug 1 20:11:26 alerce2-or Alerce-MX[24886]: New Batch: Scanning 1 messages, 28689 bytes Aug 1 20:11:26 alerce2-or Alerce-MX[24886]: Spam Checks: Starting Aug 1 20:11:26 alerce2-or Alerce-MX[24886]: Virus and Content Scanning: Starting Aug 1 20:11:27 alerce2-or Alerce-MX[24886]: McAfee said "/app/mailScanner-4.20-3/var/incoming/24886/1221616/virus.zip/VIRUS.EXE" Aug 1 20:11:27 alerce2-or Alerce-MX[24886]: McAfee said " Found the W32/Hybris.gen@MM virus !!!" Aug 1 20:11:27 alerce2-or Alerce-MX[24886]: /app/mailScanner-4.20-3/var/incoming/24886/1221616/virus.zip/VIRUS.EXE Found the W32/Hybris.gen@MM virus !!! Aug 1 20:11:27 alerce2-or Alerce-MX[24886]: Virus Scanning: McAfee found 1 infections Aug 1 20:11:27 alerce2-or Alerce-MX[24886]: Virus Scanning: Found 1 viruses Aug 1 20:11:27 alerce2-or Alerce-MX[24886]: Filename Checks: Allowing virus.zip Aug 1 20:11:27 alerce2-or Alerce-MX[24886]: Filename Checks: Allowing msg-24886-78.txt Aug 1 20:11:27 alerce2-or Alerce-MX[24886]: ZM: message 1221616 renamed into 1156463 Aug 1 20:11:27 alerce2-or Alerce-MX[24886]: Uninfected: Delivered 1 messages MSG:2003:08:01-20:11:27 1221616:1156463 28689 baby@baby.com.ar baby.com.ar prueba de envio de virus 200.22.33.162 0 0 -0.9 no es spam, Alerce-SpamAnalista (puntaje=-0.9, requerido 6, BAYES_30) TO :1221616:1156463 mabsatz@example.com example.com X-Alerce: Se encontro limpio X-Alerce-SpamAnalisis: no es spam, Alerce-SpamAnalista (puntaje=-0.9,requerido 6, BAYES_30) Return-Path: TEST 4: W32/Mimail@MM handsent (it is a zip): detected but passed thru!!!! Aug 1 20:21:03 alerce2-or Alerce-MX[26401]: New Batch: Scanning 1 messages, 28708 bytes Aug 1 20:21:03 alerce2-or Alerce-MX[26401]: Spam Checks: Starting Aug 1 20:21:03 alerce2-or Alerce-MX[26401]: Virus and Content Scanning: Starting Aug 1 20:21:04 alerce2-or Alerce-MX[26401]: McAfee said "/app/mailScanner-4.20-3/var/incoming/26401/1221616/message.zip" Aug 1 20:21:04 alerce2-or Alerce-MX[26401]: McAfee said " Found the W32/Mimail@MM virus !!!" Aug 1 20:21:04 alerce2-or Alerce-MX[26401]: /app/mailScanner-4.20-3/var/incoming/26401/1221616/message.zip Found the W32/ Mimail@MM virus !!! Aug 1 20:21:04 alerce2-or Alerce-MX[26401]: Virus Scanning: McAfee found 1 infections Aug 1 20:21:04 alerce2-or Alerce-MX[26401]: Virus Scanning: Found 1 viruses Aug 1 20:21:04 alerce2-or Alerce-MX[26401]: Filename Checks: Allowing message.zip Aug 1 20:21:04 alerce2-or Alerce-MX[26401]: Filename Checks: Allowing msg-26401-66.txt Aug 1 20:21:04 alerce2-or Alerce-MX[26401]: ZM: message 1221616 renamed into 1156463 Aug 1 20:21:04 alerce2-or Alerce-MX[26401]: Uninfected: Delivered 1 messages MSG:2003:08:01-20:21:04 1221616:1156463 28708 baby@baby.com.ar baby.com.ar mimail attachado 200.22.33.162 0 0 -0.9 no es spam, Alerce-SpamAnalista (puntaje=-0.9, requerido 6, BAYES_30) TO :1221616:1156463 mabsatz@example.com example.com X-Alerce: Se encontro limpio X-Alerce-SpamAnalisis: no es spam, Alerce-SpamAnalista (puntaje=-0.9, requerido 6, BAYES_30)