May 16 18:13:16 helios.system-linux.net amavis[23587]: AMAVIS::MTA::Postfix initialized.
May 16 18:13:16 helios.system-linux.net amavis[23587]: AMAVIS::Extract::Mail initialized.
May 16 18:13:16 helios.system-linux.net amavis[23587]: AMAVIS::Extract::Text initialized.
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS::Extract::GZIP initialized.
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS::Extract::BZIP2 initialized.
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS::Extract::ARC initialized.
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS::Extract::Zip initialized.
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS::Extract::Tar initialized.
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS::Extract::RAR initialized.
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS::Extract::LHA initialized.
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS::Extract::ARJ initialized.
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS::AV::CLAM initialized.
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS::AV::FPROT initialized.
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS::Notify::Admin initialized.
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS initialized
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS: Running as UID/EUID mail(8)/mail(8)
May 16 18:13:17 helios.system-linux.net amavis[23587]: Called as amavis neringa@aktv.lt destinataire@domain.com
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS::MTA::Postfix: Sender is neringa@aktv.lt
May 16 18:13:17 helios.system-linux.net amavis[23587]: AMAVIS::MTA::Postfix: Recipients are destinataire@domain.com
May 16 18:13:17 helios.system-linux.net amavis[23587]: Unpacking message in /tmp/amavis-unpack-4288c69d-5c23
May 16 18:13:17 helios.system-linux.net amavis[23587]: File 00000000 is type message/rfc822
May 16 18:13:17 helios.system-linux.net amavis[23587]: Attempting to unpack 00000000 as MIME compliant message
May 16 18:13:17 helios.system-linux.net amavis[23587]: File 00000002 is type application/octet-stream
May 16 18:13:17 helios.system-linux.net amavis[23587]: Not attempting to unpack 00000002
May 16 18:13:17 helios.system-linux.net amavis[23587]: File 00000001 is type text/html
May 16 18:13:17 helios.system-linux.net amavis[23587]: Not attempting to unpack 00000001
May 16 18:13:17 helios.system-linux.net amavis[23587]: Scanning with CLAM
May 16 18:13:17 helios.system-linux.net amavis[23587]: Output from /usr/bin/clamscan --dumb /tmp/amavis-unpack-4288c69d-5c23/parts
May 16 18:13:21 helios.system-linux.net amavis[23587]: /tmp/amavis-unpack-4288c69d-5c23/parts/00000000: OK
May 16 18:13:21 helios.system-linux.net amavis[23587]: /tmp/amavis-unpack-4288c69d-5c23/parts/00000001: OK
May 16 18:13:21 helios.system-linux.net amavis[23587]: /tmp/amavis-unpack-4288c69d-5c23/parts/00000002: Worm.Gibe.F FOUND
May 16 18:13:21 helios.system-linux.net amavis[23587]:
May 16 18:13:21 helios.system-linux.net amavis[23587]: ----------- SCAN SUMMARY -----------
May 16 18:13:21 helios.system-linux.net amavis[23587]: Known viruses: 28386
May 16 18:13:21 helios.system-linux.net amavis[23587]: Scanned directories: 1
May 16 18:13:21 helios.system-linux.net amavis[23587]: Scanned files: 3
May 16 18:13:21 helios.system-linux.net amavis[23587]: Infected files: 1
May 16 18:13:21 helios.system-linux.net amavis[23587]: Data scanned: 0.24 MB
May 16 18:13:21 helios.system-linux.net amavis[23587]: I/O buffer size: 131072 bytes
May 16 18:13:21 helios.system-linux.net amavis[23587]: Time: 4.066 sec (0 m 4 s)
May 16 18:13:21 helios.system-linux.net amavis[23587]: End output from /usr/bin/clamscan
May 16 18:13:21 helios.system-linux.net amavis[23587]: Return code 1
May 16 18:13:21 helios.system-linux.net amavis[23587]: Scanning with FPROT
May 16 18:13:21 helios.system-linux.net amavis[23587]: Output from /usr/local/bin/f-prot -dumb /tmp/amavis-unpack-4288c69d-5c23/parts
May 16 18:13:22 helios.system-linux.net amavis[23587]: Virus scanning report - 16 May 2005 @ 18:13
May 16 18:13:22 helios.system-linux.net amavis[23587]:
May 16 18:13:22 helios.system-linux.net amavis[23587]: F-PROT ANTIVIRUS
May 16 18:13:22 helios.system-linux.net amavis[23587]: Program version: 4.4.0
May 16 18:13:22 helios.system-linux.net amavis[23587]: Engine version: 3.14.10
May 16 18:13:22 helios.system-linux.net amavis[23587]:
May 16 18:13:22 helios.system-linux.net amavis[23587]: VIRUS SIGNATURE FILES
May 16 18:13:22 helios.system-linux.net amavis[23587]: SIGN.DEF created 16 May 2005
May 16 18:13:22 helios.system-linux.net amavis[23587]: SIGN2.DEF created 16 May 2005
May 16 18:13:22 helios.system-linux.net amavis[23587]: MACRO.DEF created 12 May 2005
May 16 18:13:22 helios.system-linux.net amavis[23587]:
May 16 18:13:22 helios.system-linux.net amavis[23587]: Search: /tmp/amavis-unpack-4288c69d-5c23/parts
May 16 18:13:22 helios.system-linux.net amavis[23587]: Action: Report only
May 16 18:13:22 helios.system-linux.net amavis[23587]: Files: "Dumb" scan of all files
May 16 18:13:22 helios.system-linux.net amavis[23587]: Switches: -ARCHIVE -PACKED -SERVER
May 16 18:13:22 helios.system-linux.net amavis[23587]:
May 16 18:13:22 helios.system-linux.net amavis[23587]: /tmp/amavis-unpack-4288c69d-5c23/parts/00000000->dxowv.exe Infection: W32/Swen.A@mm
May 16 18:13:22 helios.system-linux.net amavis[23587]: /tmp/amavis-unpack-4288c69d-5c23/parts/00000002 Infection: W32/Swen.A@mm
May 16 18:13:22 helios.system-linux.net amavis[23587]:
May 16 18:13:22 helios.system-linux.net amavis[23587]: Results of virus scanning:
May 16 18:13:22 helios.system-linux.net amavis[23587]:
May 16 18:13:22 helios.system-linux.net amavis[23587]: Files: 3
May 16 18:13:22 helios.system-linux.net amavis[23587]: MBRs: 0
May 16 18:13:22 helios.system-linux.net amavis[23587]: Boot sectors: 0
May 16 18:13:22 helios.system-linux.net amavis[23587]: Objects scanned: 4
May 16 18:13:22 helios.system-linux.net amavis[23587]: Infected: 2
May 16 18:13:22 helios.system-linux.net amavis[23587]: Suspicious: 0
May 16 18:13:22 helios.system-linux.net amavis[23587]: Disinfected: 0
May 16 18:13:22 helios.system-linux.net amavis[23587]: Deleted: 0
May 16 18:13:22 helios.system-linux.net amavis[23587]: Renamed: 0
May 16 18:13:22 helios.system-linux.net amavis[23587]:
May 16 18:13:22 helios.system-linux.net amavis[23587]: Time: 0:01
May 16 18:13:22 helios.system-linux.net amavis[23587]: End output from /usr/local/bin/f-prot
May 16 18:13:22 helios.system-linux.net amavis[23587]: Return code 3
May 16 18:13:22 helios.system-linux.net amavis[23587]: CLAM Anti Virus found:
May 16 18:13:22 helios.system-linux.net amavis[23587]: Worm.Gibe.F
May 16 18:13:22 helios.system-linux.net amavis[23587]: F-PROT Antivirus found:
May 16 18:13:22 helios.system-linux.net amavis[23587]: W32/Swen.A@mm
May 16 18:13:22 helios.system-linux.net amavis[23587]: AMAVIS::MTA::Postfix: Dropping message
May 16 18:13:22 helios.system-linux.net amavis[23587]: Quarantining infected message to /var/spool/amavis/quarantine/4288c6a2-5c23
Explication
neringa@aktv.lt : adresse avec la quelle a été envoyé le virus
destinataire@domain.com : adresse du destinataire