|
If the Clam Anti Virus (ClamAV) software
encounters a virus in an e-mail attachment, it will generate a new
e-mail to you with information on which virus it found, and from whom the
mail originated. Here is an example of such a notification e-mail:
Subject: Virus intercepted
Date: Tue, 11 Jul 2006 09:46:48 -0400 (EDT)
From: MAILER-DAEMON@po0.glue.umd.edu
To: nobody@po0.glue.umd.edu
CC: userid@glue.umd.edu>
WARNING!!! (from po0.glue.umd.edu)
An email message
You were sent an email message from admin@foo.com
that contained a virus (Worm.Mytob.IV).
This message has been deleted by the anti-virus scanner.
The message headers follow:
Received: from foo.com (c-69-251-112-75.hsd1.md.comcast.net
[69.251.112.75]) by bar.com (8.11.6/8.11.6) with ESMTP id
k6BDkSt00718 for userid@glue.umd.edu>; Tue, 11 Jul
2006 09:46:28 -0400
Message-Id: <200607111346.k6BDkSt00718@bar.com>
From: admin@foo.com
To: userid@glue.umd.edu
Subject: YOUR PASSWORD HAS BEEN SUCCESSFULLY UPDATED
Date: Tue, 11 Jul 2006 09:46:40 -0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0011_E9E58CF1.6091AA78"
X-Priority: 3
X-MSMail-Priority: Normal
Note that the original "From:" and "Subject" are preserved,
so you can tell if it came from a valid address or is spam.
|
