Help - virus/trojan/worm

[Alain Spineux]

On Wed, Jan 14, 2009 at 3:44 AM, Florian Beckmann
<florianbeckmann at gmx.net> wrote:
> Hi all,
>
> I have a problem with a virus/trojan/worm. Since only kolab-related files have
> entries like

Hi

What is your problem ?

>
> 0208:03d9fda72723c1f79dfafefcfaf419bd:Trojan.Downloader-58153
> 382976:9e88346055a2baef59dc20fd0df1b880:Trojan.Agent-59155
> 313344:d257bcbdddccedb9bf6f02fd20f1f564:Trojan.Agent-59156
> 339968:23b593336ad2be91c00603fd221f37a4:Trojan.Agent-59157
> 126976:acb84f58d9f6a7a16c33fffd2e44b9e1:Trojan.Magania-7887
> 336896:0fa145272e152ea5785e04fd3209f524:Trojan.Agent-59158
>
> I guess it's related to kolab (or at least postfix?)?
>
> I wondered if someone here could help me to find out how this happens and what I should/can/have to  do now.
>
> Related files are
> /etc/kolab/filter/config.php
>
> /etc/kolab/filter/config.php
> /etc/kolab/filter/config.php.old
> /etc/imapd.group
> /etc/postfix/ldapdistlist.cf
> /etc/postfix/ldaptransport.cf
> /etc/postfix/main.cf
> /etc/postfix/main.cf.old
> /etc/postfix/relocated
> /etc/ldap/slapd.replicas
> /etc/postfix/sasl/smtpd.conf
> /etc/postfix/transport
>
> All files were last modified at 12. Jan 13:44
>
> Debian Linux 2.6.26 with kolab 2.2.0-20080709.dfsg-2 0 from debian/unstable.
>
> Thx in advance
> Florian Beckmann
>
> --
> Psssst! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger
>
> _______________________________________________
> Kolab-users mailing list
> Kolab-users at kolab.org
> https://kolab.org/mailman/listinfo/kolab-users
>



-- 
Alain Spineux
aspineux gmail com
May the sources be with you