Postmaster发送大量病毒邮件？？？
向各位求助：发现MD7的服务器的Postmaster帐号发送大量病毒邮件到[email=back@XX.com]back@XX.com[/email]，被MD的反病毒插件当掉，但是这样把系统资源全部占。其中[email=back@XX.com][color=#000000]back@XX.com[/color][/email]这个帐号是我用来备份所有进出邮件的。
搞不明白怎么回事？Postmaster帐号可能被病毒利用吗？？？
大家有什么方法解决？？？
我现在临时解决一下，把那个[email=back@XX.com]back@XX.com[/email] 的备份功能去掉了，这样Postmaster就不会发出邮件了，不知道怎么回事。
Wed 2008-04-30 10:21:35: MDaemon AntiVirus processing d:\mdaemon\localq\md50001380951.msg...
Wed 2008-04-30 10:21:35: > Message return-path:
Wed 2008-04-30 10:21:35: > Message from: [email=Postmaster@XX.com]Postmaster@XX.com[/email]
Wed 2008-04-30 10:21:35: > Message to: back[email=back@XX.com]@XX.com[/email]
Wed 2008-04-30 10:21:35: > Message subject: (Archive Copy) MDaemon Warning - Virus Found
Wed 2008-04-30 10:21:35: > Message ID: <[email=MDAEMON0038200804301009.AA0933203@XX.com]MDAEMON0038200804301009.AA0933203@XX.com[/email]>
Wed 2008-04-30 10:21:35: Start MDaemon AntiVirus results
Wed 2008-04-30 10:21:35: * Error: unexpected error while doing virus scan!
Wed 2008-04-30 10:21:35: * Total attachments scanned : 0 (including multipart/alternatives and message body)
Wed 2008-04-30 10:21:35: * Total attachments infected : 0
Wed 2008-04-30 10:21:35: * Total attachments disinfected: 0
Wed 2008-04-30 10:21:35: * Total errors while scanning : 1
Wed 2008-04-30 10:21:35: * Message moved to d:\mdaemon\cfilter\quarant\md50000000333.msg
Wed 2008-04-30 10:21:35: * Virus notification sent to [email=postmaster@XX.com]postmaster@XX.com[/email] (admin)
Wed 2008-04-30 10:21:35: End of MDaemon AntiVirus results
Wed 2008-04-30 10:21:35: ----------
[[i] 本帖最后由 yijiande 于 2008-4-30 14:54 编辑 [/i]]
回复 1楼 的帖子
Postmaster是别名，不应该有发邮件的能力，并且MD的内置发送帐号为mdaemon@域名，最好检查下。 我也知道，Postmaster这个帐号的问题，目前情况就是这样子比较奇怪。搞不明白啊！！！ 具体病毒报告，具体如下：Wed 2008-04-30 10:21:35: MDaemon AntiVirus processing d:\mdaemon\localq\md50001380951.msg...
Wed 2008-04-30 10:21:35: > Message return-path:
Wed 2008-04-30 10:21:35: > Message from: [email]Postmaster@XX.com[/email]
Wed 2008-04-30 10:21:35: > Message to: [email]back@XX.com[/email]
Wed 2008-04-30 10:21:35: > Message subject: (Archive Copy) MDaemon Warning - Virus Found
Wed 2008-04-30 10:21:35: > Message ID: <[email]MDAEMON0038200804301009.AA0933203@XX.com[/email]>
Wed 2008-04-30 10:21:35: Start MDaemon AntiVirus results
Wed 2008-04-30 10:21:35: * Error: unexpected error while doing virus scan!
Wed 2008-04-30 10:21:35: * Total attachments scanned : 0 (including multipart/alternatives and message body)
Wed 2008-04-30 10:21:35: * Total attachments infected : 0
Wed 2008-04-30 10:21:35: * Total attachments disinfected: 0
Wed 2008-04-30 10:21:35: * Total errors while scanning : 1
Wed 2008-04-30 10:21:35: * Message moved to d:\mdaemon\cfilter\quarant\md50000000333.msg
Wed 2008-04-30 10:21:35: * Virus notification sent to [email]postmaster@XX.com[/email] (admin)
Wed 2008-04-30 10:21:35: End of MDaemon AntiVirus results
Wed 2008-04-30 10:21:35: ---------- AV－通知里把这两个勾去了：
[attach]4647[/attach] 做个别名映射试试看 那两个勾早就去掉了。谢谢。
[quote]原帖由 [i]wxhsh[/i] 于 2008-4-30 13:18 发表 [url=http://www.5dmail.net/bbs/redirect.php?goto=findpost&pid=239430&ptid=175385][img]http://www.5dmail.net/bbs/images/common/back.gif[/img][/url]
AV－通知里把这两个勾去了：
4647 [/quote]
回复 7楼 的帖子
Error: unexpected error while doing virus scan!插件出错了，先卸了吧，不过你的版本也太老了，建议升个级。 我现在是临时解决一下，把那个[email]back@XX.com[/email]帐号的备份去掉了，这样子就没有问题。真不知道怎么回事。 是不是系统里，不存在[email]back@XX.com[/email]帐 号了 是的，不知道其它办法。大家有其它办法吗？
页:
[1]