Can you post header details for any of the message?
Amit Dalia Support Head | Mobile : +91 - 8888866101 Tel : +91-20-2422-786-1 / 2 / 3 / 4 Extn - 204 -----Original Message----- From: Mike Canty [mailto:m...@collotype.com.au] Sent: Friday, November 25, 2011 2:16 PM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Help I am sending Spam To all, I have a Qmail-Toaster server that is sending SPAM messages. They are from anonymous@my.domain and all are going to mailboxes in Italy. The message is always the same, subject "PostePay Aggiornamento" and it is a HTML based messages that is definently a Phishing message. Every time we stop Qmail and then empty the queue using qmHandle, then restart Qmail, a similar thing happens. Around 200 or so messages arrive, then the server starts sending out these phishing messages. On the server (Centos 5.6) I have checked the following Rootkits - with rkhunter Viruses - Sophos (found 7 viruses and removed) Checked all the Cron files for anything unusual Changed all users passwords SSH was already secured (different port, no root access, etc.) but changed all settings and passwords. Checked and attempted a number of things in "tcp/smtp" Turned of all user machines on the network, no effect Stopped httpd Nothing worked So, basically I am looking for assistance in how to get rid if this. Cheers Mike Canty ---------------------------------------------------------------------------- ----- Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! ---------------------------------------------------------------------------- ----- Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com --------------------------------------------------------------------------------- Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! --------------------------------------------------------------------------------- Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
