Eserv Forum / E2 / Eserv 2 support (en) / e-mail worms?

imported // (v1)
Продукты и услуги Скачать Документация Купить Поддержка Форумы Партнёрам Статьи О компании
Переезд завершен

We are getting replication from within our eserv2 server. It comes from within the spooler system and we were wondering if it was an e-mail worm. We have run virus scans and found that the server is free of viruses. These messages quickly fill up the spooler. Do you have any suggestions? They come from hotmail.com. How do we kill their threads so we can stop it now and in the future?


Bill and Brent
Комментарии к этой версии (29.10.2002 23:21) [~wfbonner] d4340988
pig30.10.2002 11:01
Check Eserv logs to determinate whether these messages are arrived from outside or generated within your network. Can you forward one or pair of messages to me? I'll try to analyze them. Please forward as attachments (or save in EML format and send files).
bmgorton30.10.2002 18:16

is there a way to kill unwanted threads?

we have checked our logs and it appears to be comming from outside, here is the header of the e-mail.

For: sbs008@hanmail.net
Received: from adfa ([]) by galesburgclinic.com with SMTP id 13 for <sbs008@hanmail.net>; Tue, 29 Oct 2002 15:17:37 -0600
X-Mail-Server: Eserv/2.92/GALESBURG CLINIC PC
From: adf <orion33ll50@hotmail.com>
To: sbs008@hanmail.net
Subject: (јєАО±¤°н)ЗдЗд іЄБ».. №МДҐ°Н °°ѕЖїд...Б»ґх...јєАО±¤°нАФґПґЩ..
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
Reply-To: orion3350@hotmail.com
Date: Wed, 31 Oct 2001 06:15:32 +0900
Mime-Version: 1.0
Content-Type: text/html; charset=us-ascii
pig30.10.2002 22:09
It looks like a spam. The strangeness is only one destination address. Probably, somebody tries to use your mail server as open relay. Please show me portions of SMTP and tosser logs about this message.
Работает на Eserv/5.05567 (10.02.2020)