VPS rozsyła SPAM

[hani 0]

Witam

 

Posiadam serwer VPS. Wczoraj dostalem informacje od administratora, ze serwer rozsyla spam.

 

I moje pytanie: co zrobic aby znalezc przyczyne tego ze cos sie kurcze wpitolilo na moj vps i jak to usunac. Oczywiscie szukalem w google ale nic ciekawego nie znalazlem - bardzo prosze o pomoc i napisanie jakie komendy wykonac i co mam z tym fantem zrobic

 

PS. sprawdzalem mail.log - nic ciekawego nie ma, szukalem plikow .cgi - nie znalazlo (ostatnio tak zalatwilem sprawe)

 

z gory dziekuje za pomoc !

 

kopia email od administratora:

 

----- attachment -----

 

Return-path:

Envelope-to: abuse@hetzner.de

Delivery-date: Thu, 08 Mar 2012 18:06:34 +0100

Received: from [64.12.207.154] (helo=omr-m12.mx.aol.com)

by lms.your-server.de with esmtp (Exim 4.74)

(envelope-from )

id 1S5gnH-0007ki-DL

for abuse@hetzner.de; Thu, 08 Mar 2012 18:06:34 +0100

Received: from scmp-m006.mail.aol.com (scmp-m006.mail.aol.com [172.21.156.25]) by omr-m12.mx.aol.com (v117.7) with ESMTP id MAILOMRM123-faa14f58e66cc2; Thu, 08 Mar 2012 12:03:40 -0500

Received: from scomp@aol.net by scmp-m006.mail.aol.com; Thu, 08 Mar 2012 12:03:35 EST

To: abuse@hetzner.de

From: scomp@aol.net

Date: Thu, 08 Mar 2012 12:03:35 EST

Subject: Email Feedback Report for IP 178.63.243.7

MIME-Version: 1.0

Content-Type: multipart/report; report-type=feedback-report; boundary="boundary-1138-29572-2659438-31948"

X-AOL-INRLY: static.7.243.63.178.clients.your-server.de [178.63.243.7] scmp-m006

X-Loop: scomp

X-AOL-IP: 172.21.156.25

Message-ID:

X-Virus-Scanned: Clear (ClamAV 0.97.3/14613/Thu Mar 8 17:11:40 2012)

X-Spam-Score: 2.7 (++)

X-Spam-Report: Spam detection software, running on the system "spam20.your-server.de", has

identified this incoming email as possible spam. The original message

has been attached to this so you can view it (if it isn't spam) or label

similar future email. If you have any questions, see

support@hetzner.de for details.

 

Content analysis details: (2.7 points, 5 required)

Edytowano Marzec 9, 2012 przez hani (zobacz historię edycji)