Same messages keep populating since this morning

[Theo2k]

Greetings,

I have an exchange 2003 with approximately 35 users. Today one of my users has been receiving the same email with an attachment about every 2 minutes. The sender is from someone he knows. How do I stop it?

No one else is having this issue. No rules are in place either.

Thank you,

Theo

 

[joepc]

Sounds like a virus.

Use message tracking and the Virtual SMTP logging to assit with the e-mail's origination. See if it keeps coming from the same IP address. If it's not the senders actual IP then block it in the firewall.

Check the headers of past vaild e-mails from the sender to see where their e-mail should be originating from. You may want to look at few to be sure. If the "unwanted e-mail" is coming from the senders mail server you may want to talk to them and have their IT staff look into it at their end.

If it is coming from different IP sources then you need to come up with a SPAM solution. To start you could use Exchange's Intellignet Message filter. NOTE: There is a reg tweak to enable SPAM def updates for the Intelligent Message Filter. The updates are done via Windows Update once enabled.

 

[noveyron]

What do you have in the way of a firewall? Pix?