Virus Detected - But can not be seen on Tracking Center

koby

Renowned Member
Jun 21, 2012
138
4
83
Natanya , Israel
Hello Guys ,
Today at 1400 (IST) I experience massive virus attack which was blocked by the systems tanks to ESET anti virus (script that run as custom one).
But , the virus log can not be seen on the Tracking Center.
Because of the rules I made , which notify me as admin on any kind of spam/virus etc , I could see that attach did happened.
I trace the my syslog for the DEBUG info and I manage to find this ...

Code:
ERROR: MIME::Body::File->open /tmp/.proxdump_1250_7EAF560869E6F6DE98/xE3o de pagamento 068357_26_04_2021.exe: No such file or directory at /usr/share/perl5/MI
ME/Body.pm line 435.
Apr 26 14:05:27 smg01 pmg-smtp-filter[1250]: 7EAF560869E6F6DE98: processing time: 8.075 seconds (3.918, 0, 3.822)
Apr 26 14:05:27 smg01 postfix/smtpd[30897]: proxy-reject: END-OF-MESSAGE: 451 4.4.0 detected undelivered mail (7EAF560869E6F6DE98); from=<L.ferrari@oiv.int> to=<import@ofer.co.il> proto=ESMTP helo=<mail3
.sztoozed.com>

Can someone advice me on that please.

Best Regards ,
Koby Peleg Hen
 
My guess: your custom script deletes the discovered virus-attachment?
this results in pmg-smtp-filter being confused (since it expects its files to remain in place)

try configuring eset not to delete the virus

I hope this helps!