Help - virus/trojan/worm

[Florian Beckmann]

Hi all,

I have a problem with a virus/trojan/worm. Since only kolab-related files have
entries like

0208:03d9fda72723c1f79dfafefcfaf419bd:Trojan.Downloader-58153
382976:9e88346055a2baef59dc20fd0df1b880:Trojan.Agent-59155
313344:d257bcbdddccedb9bf6f02fd20f1f564:Trojan.Agent-59156
339968:23b593336ad2be91c00603fd221f37a4:Trojan.Agent-59157
126976:acb84f58d9f6a7a16c33fffd2e44b9e1:Trojan.Magania-7887
336896:0fa145272e152ea5785e04fd3209f524:Trojan.Agent-59158

I guess it's related to kolab (or at least postfix?)?

I wondered if someone here could help me to find out how this happens and what I should/can/have to  do now.

Related files are
/etc/kolab/filter/config.php

/etc/kolab/filter/config.php
/etc/kolab/filter/config.php.old
/etc/imapd.group
/etc/postfix/ldapdistlist.cf
/etc/postfix/ldaptransport.cf
/etc/postfix/main.cf
/etc/postfix/main.cf.old
/etc/postfix/relocated
/etc/ldap/slapd.replicas
/etc/postfix/sasl/smtpd.conf
/etc/postfix/transport

All files were last modified at 12. Jan 13:44

Debian Linux 2.6.26 with kolab 2.2.0-20080709.dfsg-2 0 from debian/unstable.

Thx in advance
Florian Beckmann

-- 
Psssst! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger