Hi!

Using a new GW8 on a NOWS SBE 2 server and a GW 8.0.1 client.

The ISP MX record doesn't point to my server yet.
The GW was already tested for send e-mails and work.
The mail server IP 81.218.128.83 NATed to local IP 192.168.254.253.
My user name was added to the GWIA as the Administrator with all roles enabled.
No POSTMASTER user defined.

I'm receiving in my Junk Mail folder strange e-mails from different sources (see at the end of this message 7 examples). Every one of the above e-mail have attachement. If I try to open the attachement The Syamntec anti-virus software says it has a virus.

Need help to understand what those mails are and how to stop them.

Please help.

TIA

Nanu

--- example 1 ---
Return-path: <>
Received: from kalmanovitz.co.il ([::ffff:58.8.49.130])
by WEB-Suse.kalmanovitz.co.il with ESMTP; Fri, 04 Sep 2009 14:22:51 +0300
From: "The Post Office" <MAILER-DAEMON@kalmanovitz.co.il>
To: nanu@kalmanovitz.co.il
Subject: MAIL SYSTEM ERROR - RETURNED MAIL
Date: Sat, 4 Jul 2009 18:44:42 +0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0003_18E624F7.E03AF657"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

This is a multi-part message in MIME format.

------=_NextPart_000_0003_18E624F7.E03AF657
Content-Type: text/plain;
charset=us-ascii
Content-Transfer-Encoding: 7bit

The original message was received at Sat, 4 Jul 2009 18:44:42 +0700 from kalmanovitz.co.il [98.71.154.101]

----- The following addresses had permanent fatal errors -----
<nanu@kalmanovitz.co.il>


------=_NextPart_000_0003_18E624F7.E03AF657
Content-Type: application/octet-stream;
name="text.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="text.zip"

UEsDBAoAAAAAAJVd5D
....
------=_NextPart_000_0003_18E624F7.E03AF657--


--- example 2 ---
Return-path: <postmaster@kalmanovitz.co.il>
Received: from kalmanovitz.co.il ([::ffff:123.24.159.234])
by WEB-Suse.kalmanovitz.co.il with ESMTP; Sat, 05 Sep 2009 07:38:40 +0300
From: "Automatic Email Delivery Software" <postmaster@kalmanovitz.co.il>
To: nanu@kalmanovitz.co.il
Subject:
Date: Sat, 5 Sep 2009 11:38:22 +0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0009_C50D26D7.DBFEBA02"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

This is a multi-part message in MIME format.

------=_NextPart_000_0009_C50D26D7.DBFEBA02
Content-Type: text/plain;
charset=us-ascii
Content-Transfer-Encoding: 7bit

Dear user nanu@kalmanovitz.co.il,

Your account was used to send a huge amount of unsolicited commercial e-mail during the last week.
Most likely your computer was infected and now runs a hidden proxy server.

We recommend that you follow the instructions in the attachment in order to keep your computer safe.

Virtually yours,
The kalmanovitz.co.il team.


------=_NextPart_000_0009_C50D26D7.DBFEBA02
Content-Type: application/octet-stream;
name="instruction.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="instruction.zip"

UEsDBAoAAAAAAMsk
...

------=_NextPart_000_0009_C50D26D7.DBFEBA02--


--- example 3 ---
Return-path: <>
Received: from kalmanovitz.co.il ([::ffff:83.42.38.171])
by WEB-Suse.kalmanovitz.co.il with ESMTP; Sat, 05 Sep 2009 13:56:04 +0300
From: "Post Office" <MAILER-DAEMON@kalmanovitz.co.il>
To: nanu@kalmanovitz.co.il
Subject: report
Date: Sat, 5 Sep 2009 12:55:55 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0004_BB5DC17B.E9B3250F"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

This is a multi-part message in MIME format.

------=_NextPart_000_0004_BB5DC17B.E9B3250F
Content-Type: text/plain;
charset=us-ascii
Content-Transfer-Encoding: 7bit

z?R?†???¡Vµ‡?AZ?§?,&?¬A??©˜E?¸[†¦•¬vµ??[P?÷?j~¹wh**?N ??_????p??¼?-‘½b« ?}‡?k?w(*????;??0SJ?\.
£?[.²jl??....


------=_NextPart_000_0004_BB5DC17B.E9B3250F
Content-Type: application/octet-stream;
name="instruction.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="instruction.zip"

UEsDBAoAAAAAAPtWJT
...

------=_NextPart_000_0004_BB5DC17B.E9B3250F--

--- example 4 ---
Return-path: <noreply@kalmanovitz.co.il>
Received: from kalmanovitz.co.il ([::ffff:71.255.141.71])
by WEB-Suse.kalmanovitz.co.il with ESMTP; Sun, 06 Sep 2009 04:47:23 +0300
From: "The Post Office" <noreply@kalmanovitz.co.il>
To: nanu@kalmanovitz.co.il
Subject: Returned mail: Data format error
Date: Sat, 5 Sep 2009 21:47:08 -0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0011_67A81139.F6887F67"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

This is a multi-part message in MIME format.

------=_NextPart_000_0011_67A81139.F6887F67
Content-Type: text/plain;
charset=us-ascii
Content-Transfer-Encoding: 7bit

The original message was received at Sat, 5 Sep 2009 21:47:08 -0400
from [167.101.8.243]

----- The following addresses had permanent fatal errors -----
nanu@kalmanovitz.co.il

----- Transcript of session follows -----
... while talking to 58.34.117.35:
>>> DATA
<<< 400-aturner; %MAIL-E-OPENOUT, error opening !AS as output
<<< 400-aturner; -RMS-E-CRE, ACP file create failed
<<< 400


------=_NextPart_000_0011_67A81139.F6887F67
Content-Type: application/octet-stream;
name="message.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="message.zip"

UEsDBAoAAAAAAOQNJjvU0
...
------=_NextPart_000_0011_67A81139.F6887F67--

--- example 5 ---
Return-path: <servline@pldtdsl.net>
Received: from pldtdsl.net ([::ffff:222.252.99.89])
by WEB-Suse.kalmanovitz.co.il with ESMTP; Sat, 05 Sep 2009 06:24:46 +0300
From: servline@pldtdsl.net
To: nanu@kalmanovitz.co.il
Subject: Delivery reports about your e-mail
Date: Sat, 5 Sep 2009 10:24:44 +0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0002_0C38B5BE.6DE01E13"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

This is a multi-part message in MIME format.

------=_NextPart_000_0002_0C38B5BE.6DE01E13
Content-Type: text/plain;
charset=us-ascii
Content-Transfer-Encoding: 7bit

Dear user nanu@kalmanovitz.co.il,

Your account has been used to send a huge amount of unsolicited commercial e-mail messages during the last week.
Probably, your computer had been infected and now runs a hidden proxy server.

Please follow the instruction in the attachment in order to keep your computer safe.

Best wishes,
kalmanovitz.co.il technical support team.


------=_NextPart_000_0002_0C38B5BE.6DE01E13
Content-Type: application/octet-stream;
name="mail.scr"
Content-Transfer-Encoding: base64
Content-Disposition: inline;
filename="mail.scr"

TVqQAAMAAAAEAAAA//8AALgA
...
------=_NextPart_000_0002_0C38B5BE.6DE01E13--


--- example 6 ---
Return-path: <postmaster@kalmanovitz.co.il>
Received: from kalmanovitz.co.il ([::ffff:71.255.141.71])
by WEB-Suse.kalmanovitz.co.il with ESMTP; Sun, 06 Sep 2009 11:50:03 +0300
From: "Returned mail" <postmaster@kalmanovitz.co.il>
To: nanu@kalmanovitz.co.il
Subject: Returned mail: Data format error
Date: Sun, 6 Sep 2009 04:49:49 -0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0011_D7DEA829.D9617FC8"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

This is a multi-part message in MIME format.

------=_NextPart_000_0011_D7DEA829.D9617FC8
Content-Type: text/plain;
charset=us-ascii
Content-Transfer-Encoding: 7bit

This message was undeliverable due to the following reason:

Your message could not be delivered because the destination server was
not reachable within the allowed queue period. The amount of time
a message is queued before it is returned depends on local configura-
tion parameters.

Most likely there is a network problem that prevented delivery, but
it is also possible that the computer is turned off, or does not
have a mail system running right now.

Your message was not delivered within 3 days:
Server 152.41.6.76 is not responding.

The following recipients could not receive this message:
<nanu@kalmanovitz.co.il>

Please reply to postmaster@kalmanovitz.co.il
if you feel this message to be in error.


------=_NextPart_000_0011_D7DEA829.D9617FC8
Content-Type: application/octet-stream;
name="transcript.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="transcript.zip"

UEsDBAoAAAAAADh
...

------=_NextPart_000_0011_D7DEA829.D9617FC8--