Virus detected in inbound email

We have just upgraded to OSX Server 3.0.3 and am now getting alerts saying "Virus detected in inbound email".
Go to /Library/Server/Mail/Data/scanner/quarantine
When I go to the folder, I don't have permission to get into it even though I am logged into the server as the administrator?
I need to see if these are coming from customer or not.
Any ideas on how to inspect them much appreciated.
Thanks
Carl

I found this post on Google, sorry to dig up an old thread but I'd just like to say you can inspect them this way:
sudo su
cd /Library/Server/Mail/Data/scanner/quarantine
ls
If the files are gz format like they are on my server you can:
zless <bad file name here>.gz
Then use your up and down keys to see the HTML content or anything else. In my case it was actually a legitimate message being marked as spam, not a virus at all!

Similar Messages

Server Alerts reports "Virus Detected in inbound email" for spam

I receive hundreds of email every day that a Virus was detected in inbound email. When checking the contents of /Library/Server/Mail/Data/scanner/quarantine these messages are only spam message, not viruses. Virus infected messages seem to get placed in /Library/Server/Mail/Data/scanner/virusmails
I am running on Mavericks Server 3.1.2 (1354517)
serveradmin -v = Version 10.8 ($revision: 1.13 $ -- May 13 2014)
Does anyone know how to tune the Server Alerting to properly handle the files in /Library/Server/Mail/Data/scanner so that virusmails are reported as virus's but quarantine is not reported?
I have searched high and low, and cannot find where this is controlled. With Mavericks, I no longer see Virus Alerts under the alerts management menu of Server.app
I checked amavisd configs, as well as many other files under /Library/Server for any references to "quarantine" text, to no avail.
I dumped all of serveradmin settings, and do not see anything that references quarantine except for the quarantine recipient addresses for spam and viruses.
Is anyone else experiencing this, or does anyone know how to solve this?
Thanks in advance.

I received over 200 spam messages yesterday that got reported as viruses to me, and out of frustration, I discovered a work around. I don't know if this is the result of a past update, or the steps I used trying to reset the server, but I performed the following and was able to suppress the email alerts. At the time of my original posting, the Alerts section of the Server.app did not offer any option for disabling the alerts for virus..
1) Launch Server.app
2) Select Mail in left pane
3) Turn off Virus filtering
4) stop/start Mail server
5) Turn on Virus filtering
6) stop/start Mail server
7) Turn off Spam filtering
8) stop/start Mail server
9) Turn on Spam filtering
10) stop/start Mail server
11) Select Alerts in left pane
12) clear all active alert
13) Under notifications tab, I now saw "Mail" as an option
13.1) Turn off the alerts for Mail
Now I don't get spammed with Virus alerts for spam messages. This is not a fix for the configuration error in the alerting service, but it does stop the admin mailboxes from being flooded with virus alerts for all spam messages. I cannot confirm if it was the enable/disable of the filtering that added the Mail entry under alert notifications or if it was an update, as I did not check the alerts notifications at the time. I was frustrated, and desperate for a fix, so I did the first thing that came to mind. But now my Mail system alerts can be enabled/disabled through server.app so I am happy. Lets just hope for a classification fix in the Yosemite update coming this fall.

Virus Detected in inbound e-mail

I have been getting alerts on mac os server pertaining to the mail:
Virus detected in inbound email
A virus was detected in an inbound email. The message containing the virus was not delivered to the intended recipient and has been moved to:
/Library/Server/Mail/Data/scanner/quarantine
It is recommended that you delete all messages in this directory. Messages left in the above location for longer than 72 hours will be automatically deleted.
However when I go look in that folder it is empty (I know it deletes in 72 hours but I look immediately). I get no info on who it was intended for, what was really done with it, if it was a mistake or anything. Am i missing something?
Thanks

I found this post on Google, sorry to dig up an old thread but I'd just like to say you can inspect them this way:
sudo su
cd /Library/Server/Mail/Data/scanner/quarantine
ls
If the files are gz format like they are on my server you can:
zless <bad file name here>.gz
Then use your up and down keys to see the HTML content or anything else. In my case it was actually a legitimate message being marked as spam, not a virus at all!

Sophus anti virus detected troj/upatre-jl and cleanup failed. how to manually remove?

My Sophus Anti Virus detected "troj-upatre-jl" and the cleanup failed from quarantine manager.
It says manual cleanup is required and I have absolutely no idea how to do that. Need help!

Either it detected nothing at all, or it detected Windows malware in an email attachment. The malware will have no effect as long as you don't pass it on to anyone else or run it yourself in Windows.
Remove the useless, time-wasting Sophos product by following the instructions on this page, and also this one, if applicable. If you have a different version, the procedure may be different.
Back up all data before making any changes.

Anyone benefiting from anti-spyware or virus detection?

Anyone with experience or opinions on anti-spyware/virus detection software for our Macs?
I'd like to know if anyone has one worth while to recommend.
Concerned with more and more apps., and blogging sites and websites visited.
Thanks....

Adding my two cents worth:
At this time there have been no confirmed Mac OS X viruses (subject to the semantic debate about whether the iChat exploit from a couple of years ago is properly classified as a virus or a trojan horse and not counting the Word macro virus that can affect Office v.X or non-updated copies of Office 2004), very few trojans and no adware or spyware. I therefore do not feel that antivirus or antispyware software is necessary at this time as long as users are careful about what they download from the Internet or accept as attachments via email.
It's never wise to become complacent, though, so security precautions are not wasted. Such security precautions mostly are common sense: don't download and run files from sites you don't know, don't double-click on attachments in emails you aren't expecting and/or from people you don't know, and make sure you password your system and keep that password secure, In addition, don't leave your your system available in a public place and unattended where someone unauthorized could use it and potentially install malware (such a policy is also a precaution against theft).
It is possible for a Mac user to inadvertently forward a Windows virus to a PC user though you'd have to do it manually so the above precautions would probably prevent such virus-spreading, and said Windows virus cannot infect the Mac.
If you do decide you wish to run antivirus software, I think that the donationware clamXav should be more than enough provided you remember to scan your system from time to time. iAntivirus has also been recommended by others, though I have no personal experience with it.
If you are running Windows on your system, either via BootCamp, Parallels Workstation or another solution, then that copy of Windows is subject to all the myriad exploits common to the Windows world, so you need to take full precautions, including running both antivirus and antispyware software.
Regards.
Message was edited by: Dave Sawyer

Inbound email update data in R/3 46C?

I know that Interactive Forms has the possibility of having an inbound email update data in R/3?
I also know that Interactive Forms is not possible with version 46C.
Can I get an inbound e-mail to update data in R/3 if I am on version 46C???
-Ken

Dear Relaxed Surfer,
The link you give is great to handle basis setup.
Is there a place to handle application setup? Suppose I want an inbound e-mail to execute a transaction, call a BAPI or simply do a direct update to a Zee table. Is there documentation on this?
-Ken

Blackberry Desktop 6 Detects previous Exchange email and will not sync

I previously had an exchange email account setup from an employer and that is no longer the profile I am using, but Blackberry Desktop still detects it even though it is deleted in my mail settings. I have uninstalled and reinstalled the software and it still detects the previous email settings.

I am having the same issue.
Music Services Failed to Load
An unexpected error occured
This didn't happen until the other day when the new Desktop Manager was updated.
I think the issue is that my iTunes library resides on an external drive. I can't seem to find how / where to tell BB Desktop Manager where my iTunes library is. I have tried leaving my iTunes file open and that didn't work either.
I switched the music to Windows Media Player and some old music files that reside on my "C" drive were located but when I switch it back to iTunes I get the error.
Any help is greatly appreciated.

Directory Damage, what can be used for Disk Repair and Virus Detection?

Hi,
My eMac is acting up. Yesterday I started getting these messages that I needed to restart my computer (message was in a brown box window with an icon of a start up button in background).
I did the disk repair using Start up CD and it came back with "invalid key......." or something like that, and when I tried to repair it, it tried to repair the B-Tree's but then said it could not repair the problem.
I have Diskwarrior 3.03 Build 39, on a CD and on my FW Ext HD, which has a clone of my Mac HD.
Diskwarrior could not produce a graph of Mac HD because the directory was damaged. When I did a rebuild it hung on step 9 comparing directories, said there was 7 million + tests. ( I let it hang on step 9 for 15 hrs. to see if maybe it was just taking a long time due to corrupt directory). I finally clicked on Skip and got to the report page. I could do a preview, but the replace button is greyed out. When I was comparing the sizes of each folder, in both preview and original, I got a can not calculate error message on a few of them. The size of Mac HD in preview compared to the one in Original was different by 4 gbs. A week ago I repaired the Mac HD and did a Diskwarrior directory repair on all my HD's.
Before I do any reformatting of HD or other drastic measures, I was wondering what is safe to use for disk repair and virus detection. I know there is Norton System Works 3.0, Norton AntiVirus and TechTool, are these the only ones? Are these safe to use? Are there any other programs that can repair directory damage?
Thank you in advance,
Deb
eMac 2005 1.42GHz Combo Drive 256MB Tiger 10.4 75GB Mac OS X (10.4) Western Digital (WD) 160GB FW Ext & WD 320gb Media FW Ext, Creative Speakers

The long-standing rule of thimb has been that if Disk Warrior can't repair a mungled disk directory, then you're looking at reformatting or replacing the hard drive. Since this is a week-old hard drive, I'd suspect the replacement hard drive is itself bad. It might save you grief in the long run to contact the vendor who sold you the drive and inquire about their warrenty. You might want to first run the file system check utility fsck as described in Using Disk Utility and fsck
Directory repair and antivirus protection are different critters. Norton AV is mostly safe (if you don't mind it's track record of false positives) and is used by the IT department at the lab where I work. Norton SystemWorks, AKA Disk Doctor Kervorkian, is most assuredly NOT safe. For every poster reporting something nice about it, you'll find at least 2 dozen cursing it. It has a known track record of detecting problems no other utility finds and of "repairing" drives such that nothing can then read or repair the drive short of low-level reformatting (and occasionally even that fails).
Tech Tool Pro 4 has a good reputation, as does Drive Genius. Tiger OS X 10.4.2 and later include a version of Disk Utility that can for the first time also make effective B-tree and keys out of order and overlapped extent repairs. Still, my personal gut feeling is that if Disk Warrior is choking on the hard drive, you're looking at reformatring while zeros the drive (zeroing should detect and map out bad physical secotrs).
You can also refer to Disk First Aid: What to do when it finds an error and to Handling "overlapped extent allocation" errors reported by Disk Utility or fsck

Virus Detected (403), Your file could not be uploaded because it contains a virus.

From a Windows 7 Ultimate PC I tried to upload a PDF portfolio containing 35 PDFs. The upload failed with the message "Virus Detected (403), Your file could not be uploaded because it contains a virus."
It is highly unlikely that this PDF portfolio or its 35 PDFs contain a virus. It passed a scan by Microsoft Security Essentials. Any suggestions?
Bill

Hello,
I've got the same 403 error when I want to upload a ebook (purchased on peachpit, see this url for ebook), but when I scan it (windows 8 / avast) no virus found.
Olivier

Enable SAP Inbound email through IMAP, POP3 & MAPI instead of SMTP

Hi,
I am trying to configure SAP Inbound email in CRM 6.0 and would like to know if I can use IMAP, POP3 or MAPI instead of SMTP due to our company's legal policies and maintenance purposes.
If there is a way, please let me know how to?
I have checked other options but none of them talk about IMAP, POP3 or MAPI
*) ICI (Integrated Communication Interface)
*) Agent Inox based on SAP Connect Interface via SAP Business WorkflowCheck
http://help.sap.com/saphelp_crm60/helpdata/en/46/23e545c17b5872e10000000a11466f/content.htm
PI Mail Adapter - http://help.sap.com/saphelp_nw04/helpdata/en/ad/bf93409c663228e10000000a1550b0/frameset.htm
Configuring the Sender Mail Adapter - http://help.sap.com/saphelp_nw04/helpdata/en/ad/bf93409c663228e10000000a1550b0/frameset.htm
Configuring the Receiver Mail Adapter - http://help.sap.com/saphelp_nw04/helpdata/en/ad/bf93409c663228e10000000a1550b0/frameset.htm
Thanks in advance

Hello,
As far as I am aware, SMTP is now the only supported option for configuring inbound emails through the SAPConnect interface into the Interaction Center agent inbox.
[SAP Note 455140|https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=455140]
[SAP Note 1236270|https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=1236270}
Best regards,
John

Inbound Email configuration - SAP CRM with MS Exchange Server

Dear Pundits,
We are implementing SAP CRM and one of the requirement is to configure the Inbound email functionality.
As of now, we have successfully configured the outbound mail functionality.
The inbound email functionality to a Single client:
Our MS Exchange Server Domain is ITAstute.com.
Where as, on the CRM system, under SCOT transaction --> Settings --> Default Domain, we have entered the Domain name as
crm-dev.itastute.com
We are planning to receive emails for different email id's like service, complaints, and so on into our SAP system.
How will the exchange server can direct the mails from above external emails from domail itastute.com to onto CRM server domain crm-dev.itastute.com????
Thank you,
Nikee

Then you need to define the routing rule in the exchange server.
Exchange server config is outside the SAP scope and you should contact your exchange admin to get it done.
Also they might force you to use the port 25 if you have any policy such in your company.
We used the routing rule from exchange to BIGIP and BIGIP to our SAP server, that way we could use different port.
You could search in google for the steps and i come accross the link given below.
See if its useful.
Link: [exchange rule|http://www.petri.co.il/forums/showthread.php?t=13120]
Additional input related to the rule.
you need to define the virtual host if you have more than one client that need to be configured for inbound routing.
*@crm-dev.itastutecom => * applies to any user in your system and crm-dev.itastutecom should be your virtual host.
janus.itastute.com => is your hostname and define port number for each client that need to configured.

Create service request with inbound email linked to it

Hi,
we are on CRM 7.0 and interaction center agents need to open and read inbound emails in the agent inbox and in some cases manually create Service Requests to which the email should be linked.
Is there any standard functionality to manually create a new Service Request with the inbound email linked to it or do we have to implement it with custom coding? (we have already used ERMS to automatically create Service Requests linked to emails, but in some scenarios agents need to create manually service requests linked to mails after reading the email in the inbox)
Thanks,
laura.

Hi Joaquin,
Thank you for answering. I already tried: I select the line with the email in the Inbox, I press Interact (the account is automatically recognized and I am asked to confirm it), I confirm the account and then I navigate to "Service Request" workcenter: a new Service Request is displayed, with the employee responsible and the customer automatically filled. However, I can see no data regarding any attached email in any of the Service Request tabs (even if I save or select "End").
After your answer, I tried the same procedure with the "Service Ticket" and noticed that the email is correctly displayed as an Interaction Record under the Business Content tab for the Service Ticket: since you confirmed that this should work also for Service Request, I guess there's something wrong in my customizing settings and now I will search for errors.
Thanks for your help.
Best regards,
Laura.

Inbound Email process issue

Hi,
we have a issue with inbound email process. inbound emails are not coming and showing inbox undeleverable message
showing below message in undeleverable mail
"There was a SMTP communication problem with the recipient's email server"
please help me how to solve this issue. i am working on CRM 7.0 version.
Thanks & Regards
Kishore kumar

Hi,
If you posted the Document through VL32N.. Then you cannot try reversal using MIGO, becaouse it will not update "delivery document flow". For more reasons please see the Note "199703"
If you have created any reversal material document. then cancel it. you can reverse the Inbound delivery only using VL09
Regards
GK.

Insert inbound email as an attachment in a new email

Sorry experts. I think this question is more apropriate in the ABAP forum, but since I'm doing this from a BSP application, and there are no answers from there I'll check with the experts here.
I need to send in a reply of an email, the source email as an attachment (even if it have attachments included).
At outlook, we can save an email as a .msg file to the hard disk, and the attach it in a new email.
In a bsp application (such as IC Webclient), do you think it is possible to do this automatically?
I can get all the information relative to an inbound email (by knowing it's SOODK id), by doing the following line codes.
DATA: LV_MAIL_DATA TYPE REF TO CL_CRM_EMAIL_DATA.
DATA: SOME_SOODK TYPE SOODK.
SOME_SOODK = 'RAW30000000006996'.
LV_MAIL_DATA = CL_CRM_EMAIL_UTILITY=>GET_MAIL_DATA_FROM_SO( IV_OBJECT_ID = SOME_SOODK ).
In lv_mail_data, I can see the headers, the TO and FROM email adresses, the body of the email, and it's attachments.
What I don't know how to do, is to take this email as a whole object, and insert it as an attachment in a new email to be sented.
Anyone can give a clue?
Thanks!
Regards

Not needed anymore.

Inbound emails stripped of .FAX attachments

G'day all,
I'm on a 620 system up to basis patch 60.
When an inbound email contains an attachment with extension .FAX the attachment disappears!!
Any other extensions are fine. The .FAX files in my case are actually .TIF files but the software creates them with .FAX extension.
If I rename the file to have a .FOX extension for example, the attachment makes it into SAP just fine, as does any other extensions I've tried (.TXT, .DOC, .ZIP, .PDF, .XLS etc)
This happens whether I send to a normal SAP users inbox or whether I handle the inbound request using my own SO50 configured class.
We've turned on the Inbound and General trace in SCOT and there is nothing too exciting. The log does show there is a .FAX attachment present (so it's not stripped by the external mail system) but it doesn't indicate that it's been removed.
Please note!! This is NOT inbound Fax handling. It's just a mail that happens to have an attachment which ends with the extension .FAX.
Any ideas??
Thanks,
Mark

Hello,
Can you please check SAP note:
813619
make sure the customizing of the type .FAX is correct.
Best regards,
Dezso

Virus detected in inbound email

Similar Messages

Maybe you are looking for