How do I go about tracking down an email that was sent by a virus infected computer? The message I received appears to be from me sent to me. All of my systems are clean, running the appropriate Symantec AV product, including Exchange. The gateway has a FortiGate AV scanner too. Any thoughts?
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations biv343 on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
email Tracking
- Thread starter skialta
- Start date
Well, if you have the message, you can view the email header: in Outlook by opening the mail and select View->Options. That'll show the history of it's route.
You could try searching on Ex2003 message tracking on the ESM.
And you could search any SMTP logs on your server - esp the gateway. That might show up all the BCC recipients.
Also, should is the infected computer allowed connect to your ex2003 server via SMTP? Is this required, you could lock them down more.
You could try searching on Ex2003 message tracking on the ESM.
And you could search any SMTP logs on your server - esp the gateway. That might show up all the BCC recipients.
Also, should is the infected computer allowed connect to your ex2003 server via SMTP? Is this required, you could lock them down more.
- Status
Similar threads
- Locked
- Question
- Locked
- Question
- Locked
- Question