Zarafa 7.2.0-48204 Attachment Virus

Hi all,

we often have the problem that some attachments are viral infected.
e.g. this attachment

/mnt/MessageStore/attachments/9/9/1074299.gz//1074299/Payment Copy_xls.cmd

For me it´s very important to find out which account has received this e-mail and when.
How can we get this information?

Thank you for your help!

Benjamin

I am not really answering your question, but how did you get into this situation in the first place?

Are you running something like MailScanner + clamav (or there may be many others) in your MTA to filter this stuff out before it hits Kopano?

Yes you are right.
On the Ubuntu server runs Kaspersky for Fileserver.
Actually, Kaspersky for Mailserver should catch the viruses before the attachments are saved on the server, but somewhere are gaps or if they are very new viruses it may be that they are not detected when received but at a regular scan.

or perhaps someone uploaded the file in webapp and click “send” that means that it would be stored anyway?

You’re right. Do you have an idea how I can find the mailbox?

sadly not…