Received: SIZE=2648 from mail.lokisworld.com ([127.0.0.1]) by localhost (mail.lokisworld.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 88756-02 for ; Wed, 14 Feb 2007 16:32:45 +0800 (HKT) Feb 14 16:32:46 mail amavis[88756]: (88756-02) Checking: [202.85.141.135] -> Feb 14 16:32:46 mail amavis[88756]: (88756-02) p005 1 Content-Type: multipart/alternative Feb 14 16:32:46 mail amavis[88756]: (88756-02) p001 1/1 Content-Type: text/plain, size: 51 B, name: Feb 14 16:32:46 mail amavis[88756]: (88756-02) p006 1/2 Content-Type: multipart/mixed Feb 14 16:32:46 mail amavis[88756]: (88756-02) p002 1/2/1 Content-Type: text/html, size: 138 B, name: Feb 14 16:32:46 mail amavis[88756]: (88756-02) p003 1/2/2 Content-Type: application/octet-stream, size: 68 B, name: eicar.com Feb 14 16:32:46 mail amavis[88756]: (88756-02) p004 1/2/3 Content-Type: text/html, size: 770 B, name: Feb 14 16:32:46 mail amavis[88756]: (88756-02) p.path BANNED:1: "P=p005,L=1,M=multipart/alternative | P=p006,L=1/2,M=multipart/mixed | P=p003,L=1/2/2,M=application/octet-stream,T=asc,N=eicar.com", matching_key="(?ix-sm:.\\.(ade|adp|app|bas|bat|chm|cmd|com|cpl|crt|exe|fxp|hlp|hta|inf|ins|isp|\n js|jse|lnk|mda|mdb|mde|mdw|mdt|mdz|msc|msi|msp|mst|ops|pcd|pif|prg|\n reg|scr|sct|shb|shs|vb|vbe|vbs|wsc|wsf|wsh)$)" Feb 14 16:32:46 mail amavis[88756]: (88756-02) ask_av (ClamAV-clamd): /var/amavisd/tmp/amavis-20070214T163245-88756/parts INFECTED: Eicar-Test-Signature Feb 14 16:32:46 mail amavis[88756]: (88756-02) virus_scan: (Eicar-Test-Signature), detected by 1 scanners: ClamAV-clamd Feb 14 16:32:46 mail amavis[88756]: (88756-02) Blocked INFECTED (Eicar-Test-Signature), [202.85.141.135] [202.85.141.135] -> , Message-ID: <6AD539A0-78AB-4D89-8398-3A8C7A499C43@overridersworld.com>, Hits: -, 642 ms Feb 14 16:32:46 mail amavis[88756]: (88756-02) TIMING [total 647 ms] - SMTP EHLO: 2 (0%), SMTP pre-MAIL: 1 (0%), mkdir tempdir: 0 (0%), create email.txt: 0 (0%), SMTP pre-DATA-flush: 2 (0%), SMTP DATA: 100 (15%), body_hash: 1 (0%), maia_connect: 2 (0%), maia_read_system_config: 2 (0%), maia_get_mysql_size_limit: 1 (0%), mkdir parts: 0 (0%), lookup_sql: 3 (0%), mime_decode: 22 (3%), get-file-type4: 17 (3%), decompose_part: 1 (0%), decompose_part: 0 (0%), parts_decode: 0 (0%), AV-scan-1: 56 (9%), read_counters: 1 (0%), best_try_originator: 1 (0%), update_cache: 1 (0%), maia_store_mail: 129 (20%), maia_record_viruses: 218 (34%), maia_set_mail_status: 40 (6%), deal_with_mail_size: 26 (4%), main_log_entry: 17 (3%), update_snmp: 1 (0%), maia_cleanup: 2 (0%), maia_disconnect: 1 (0%), unlink-4-files: 1 (0%), rundown: 1 (0%) Feb 14 16:32:46 mail postfix/smtp[99418]: E5D0812B020: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=1.1, delays=0.43/0.01/0/0.65, dsn=2.7.1, status=sent (250 2.7.1 Ok, discarded, id=88756-02 - VIRUS: Eicar-Test-Signature) Feb 14 16:32:46 mail amavis[88756]: (88756-02) extra modules loaded: Crypt/Blowfish.pm, Crypt/CBC.pm Feb 14 16:32:46 mail postfix/qmgr[94223]: E5D0812B020: removed