Virus from my own domain

[Creeker]

My antivirus program is detecting virus sent to our domain from an erroneous address at our domain. It's not really from us but I'm afraid others are getting this and thinking it is us. Can anyone explain what is going on here?

 

[manarth]

when a virus sends out infected email, it often spoofs the sending address - in other words, some poor soul's infected machine is sending out email from "someperson@yourdomain.example.com"

some of the emails the virus sends out will be bounced (either by a virus scanner or a spam blocker) - unfortunately, they bounce back to the "from" address specified by the virus.

Peach66 also had a similar problem in thread760-622715.

<marc> i wonder what will happen if i press this...[ul][li]please give feedback on what works / what doesn't[/li][li]need some help? how to get a better answer: faq581-3339[/li][/ul]

 

[Creeker]

My concern is that it is bouncing off of us. Can anyone make it look like it is being sent from us when it is not?

 

[wbg34]

Creeker,
Yes this can be spoofed. Are the e-mails from admin@yourdomain.com? If so, then read up on Mimail here.

http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.a@mm.html

Another possibility is Klez.

http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.h@mm.html