Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Constant infected email sent from internal and external addys.....

Status
Not open for further replies.

lefty78

IS-IT--Management
May 29, 2002
111
US
I am an admin on a windows 2000 network. We all run outlook as we have no mail server on site. We have a company that hosts our web site as well as our mail server.

The problem is that every day all of my users are receiving infected emails in their inbox. The from line has contained everything imaginable...themselves, other internal addresses, some such as 'customerservice@<our_domain>.com' (this is not an actual account, but emails directed to that account, as well as a few others, are redirected by our mail server to their respected accounts, i.e. the 'customerservice@<our_domain>.com are directed to our customer service reps accounts i.e. <cust serv reps first name>@<our_domain>.com, so these accounts are not even set up to be sent from by an email client) Our internal viral program does block all of these incoming mail messages.....as of now, I am trying to rid these as a whole in case there is a future attachment that the viral prog does not recognize.

These emails also come from all types of various email addresses. We probably see over 1000 of them per week with only 15 users. I cannot find what is infected and dont even know where to look beyond what I have already done.

I know that none of our desktops or servers are infected. The virus seems to have attached to a contacts folder somewhere, but it has not attached to any of ours here. We know think this because I had set all of the address books to load with some company specific email addresses that everyone would need. And none of those email receipients have ever received anything from us.

Anyone have any suggestion as to where I should look for an answer?

I beleive it is living on the mail server that is hosted for us, but they assure us that the box is not infected. Of course there is no way for me to check that....I don't think......
 
anyone have an idea where to look next??
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top