Delivered-To: root@linux.local
From: postmaster@linux.local
To: virusalert@linux.local
Subject: VIRUS FROM management@roland-kaiser.de (Worm/MyDoom.A2)
Date: Thu, 12 Feb 2004 17:54:04 +0100 (CET)
X-Virus-Scanned: by AMaViS 0.3.12pre8

A virus was found in an email from:

   management@roland-kaiser.de

The message was addressed to:

-> mike@localhost.linux.local

The message has been quarantined as:

   /var/spool/vscan/virusmails/virus-20040212-175404-3303

Here is the output of the scanner:

   AntiVir / Linux Version 2.0.9-16
Copyright (c) 1994-2004 by H+BEDV Datentechnik GmbH.
All rights reserved.

Loading /usr/lib/AntiVir/antivir.vdf ...

VDF version: 6.23.0.55 created 03 Feb 2004

For private, non-commercial use only.
AntiVir license: 1001024209 for Brumlich, Bennewitz

checking drive/path (list): /var/spool/vscan/amavis/amavis-14818251/parts
/var/spool/vscan/amavis/amavis-14818251/parts/part-00001
 Date: 12.02.2004  Time: 17:54:04  Size: 22528
 ALERT: [Worm/MyDoom.A2 virus] /var/spool/vscan/amavis/amavis-14818251/parts/part-00001 <<< Contains signature of the worm Worm/MyDoom.A2
 
 ----- scan results -----
 directories:        1
       files:        2
      alerts:        1
    repaired:        0
     deleted:        0
     renamed:        0
   scan time: 00:00:01
------------------------
Thank you for using AntiVir.

Here are the headers:
------------------------- BEGIN HEADERS -----------------------------
Received: from localhost (localhost [127.0.0.1])
        by linux.local (Postfix) with ESMTP id BB3102EAB4F
        for <mike@localhost>; Thu, 12 Feb 2004 17:54:01 +0100 (CET)
Delivery-date: Wed, 11 Feb 2004 15:47:36 +0100
Received: from mx.freenet.de [194.97.55.148]
        by localhost with IMAP (fetchmail-5.9.13)
        for mike@localhost (single-drop); Thu, 12 Feb 2004 17:54:01 +0100 (CET)
Received: from [194.97.50.135] (helo=mx2.freenet.de)
        by mbox39.freenet.de with asmtp (ID exim) (Exim 4.30 #6)
        id 1AqveJ-0006Uj-Ol
        for m.br@01019freenet.de; Wed, 11 Feb 2004 15:47:35 +0100
Received: from gfafb.g.pppool.de ([80.185.250.251] helo=roland-kaiser.de)
        by mx2.freenet.de with esmtp (Exim 4.30 #6)
        id 1AqveI-0001MX-AS
        for m.br@freenet.de; Wed, 11 Feb 2004 15:47:34 +0100
From: management@roland-kaiser.de
To: m.br@freenet.de
Subject: Test
Date: Wed, 11 Feb 2004 15:50:45 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="----=_NextPart_000_0007_27793C60.8FCD8BB0"
X-Priority: 3
X-MSMail-Priority: Normal
Delivered-To: m.br@freenet.de
Envelope-to: m.br@freenet.de
X-Warning: Malware found (Worm.SCO.A).
Message-Id: <20040212165401.BB3102EAB4F@linux.local>
-------------------------- END HEADERS ------------------------------