Postmaster发送大量病毒邮件？？？

yijiande

向各位求助：
发现MD7的服务器的Postmaster帐号发送大量病毒邮件到back@XX.com，被MD的反病毒插件当掉，但是这样把系统资源全部占。其中back@XX.com这个帐号是我用来备份所有进出邮件的。
搞不明白怎么回事？Postmaster帐号可能被病毒利用吗？？？
大家有什么方法解决？？？

我现在临时解决一下，把那个back@XX.com 的备份功能去掉了，这样Postmaster就不会发出邮件了，不知道怎么回事。


Wed 2008-04-30 10:21:35: MDaemon AntiVirus processing d:\mdaemon\localq\md50001380951.msg...
Wed 2008-04-30 10:21:35: > Message return-path:
Wed 2008-04-30 10:21:35: > Message from: Postmaster@XX.com
Wed 2008-04-30 10:21:35: > Message to: back@XX.com
Wed 2008-04-30 10:21:35: > Message subject: (Archive Copy) MDaemon Warning - Virus Found
Wed 2008-04-30 10:21:35: > Message ID: <MDAEMON0038200804301009.AA0933203@XX.com>
Wed 2008-04-30 10:21:35: Start MDaemon AntiVirus results
Wed 2008-04-30 10:21:35: * Error: unexpected error while doing virus scan!
Wed 2008-04-30 10:21:35: * Total attachments scanned    : 0 (including multipart/alternatives and message body)
Wed 2008-04-30 10:21:35: * Total attachments infected   : 0
Wed 2008-04-30 10:21:35: * Total attachments disinfected: 0
Wed 2008-04-30 10:21:35: * Total errors while scanning  : 1
Wed 2008-04-30 10:21:35: * Message moved to d:\mdaemon\cfilter\quarant\md50000000333.msg
Wed 2008-04-30 10:21:35: * Virus notification sent to postmaster@XX.com (admin)
Wed 2008-04-30 10:21:35: End of MDaemon AntiVirus results
Wed 2008-04-30 10:21:35: ----------

[ 本帖最后由 yijiande 于 2008-4-30 14:54 编辑 ]

wxhsh

Postmaster是别名，不应该有发邮件的能力，并且MD的内置发送帐号为mdaemon@域名，最好检查下。

yijiande

我也知道，Postmaster这个帐号的问题，目前情况就是这样子比较奇怪。搞不明白啊！！！

yijiande

具体病毒报告，具体如下：
Wed 2008-04-30 10:21:35: MDaemon AntiVirus processing d:\mdaemon\localq\md50001380951.msg...
Wed 2008-04-30 10:21:35: > Message return-path:
Wed 2008-04-30 10:21:35: > Message from: Postmaster@XX.com
Wed 2008-04-30 10:21:35: > Message to: back@XX.com
Wed 2008-04-30 10:21:35: > Message subject: (Archive Copy) MDaemon Warning - Virus Found
Wed 2008-04-30 10:21:35: > Message ID: <MDAEMON0038200804301009.AA0933203@XX.com>
Wed 2008-04-30 10:21:35: Start MDaemon AntiVirus results
Wed 2008-04-30 10:21:35: * Error: unexpected error while doing virus scan!
Wed 2008-04-30 10:21:35: * Total attachments scanned    : 0 (including multipart/alternatives and message body)
Wed 2008-04-30 10:21:35: * Total attachments infected   : 0
Wed 2008-04-30 10:21:35: * Total attachments disinfected: 0
Wed 2008-04-30 10:21:35: * Total errors while scanning  : 1
Wed 2008-04-30 10:21:35: * Message moved to d:\mdaemon\cfilter\quarant\md50000000333.msg
Wed 2008-04-30 10:21:35: * Virus notification sent to postmaster@XX.com (admin)
Wed 2008-04-30 10:21:35: End of MDaemon AntiVirus results
Wed 2008-04-30 10:21:35: ----------

wxhsh

AV－通知里把这两个勾去了：

lwz_08

做个别名映射试试看

yijiande

那两个勾早就去掉了。谢谢。

原帖由 wxhsh 于 2008-4-30 13:18 发表
AV－通知里把这两个勾去了：
4647

wxhsh

Error: unexpected error while doing virus scan!
插件出错了，先卸了吧，不过你的版本也太老了，建议升个级。

yijiande

我现在是临时解决一下，把那个back@XX.com帐号的备份去掉了，这样子就没有问题。真不知道怎么回事。

redif

是不是系统里，不存在back@XX.com帐 号了