On Tue, Mar 09, 2021 at 12:53:09PM +0100, Luca Bertoncello via Exim-users wrote:
> > I suspect Kaspersky library as source of this process.
>
> I suspect it too, but I'd like to confirm that...
...
> This is my /tmp/sendmail.log:
>
> 6366 pts/0 S+ 0:00 exim -d+all -bh 185.242.112.224
>
> Do I understand correctly, that Exim generate the E-Mail?
Yes, this is what expected if Kaspersky library spawns child process.
It can be finally confirmed with ltrace or gdb run,
and it should disappear if you remove library call.
--
Eugene Berdnikov