RE: SoBIG
- From: "Mike Liddekee" <mliddekee@xxxxxxxxx>
- To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
- Date: Thu, 4 Sep 2003 11:31:15 -0500
It's not that you or your email server is sending these emails. Someone
that has your email address or address for person(s) in your
organization has the virus. Viruses like SoBig fake the return headers
so it appears to come from someone else. When a server gets an email
that either has a virus attached (or in your case to a person that's no
longer there), it may send a reply to the users listed in the return
path of the message, which in this case is fake and inaccurate. If
you're protected on all fronts then I wouldn't wortty about getting
these types of messages. I usually get 4 or 5 a day myself. Until the
day that we have no viruses (or hell freezes over), you will probably
always get stuff like this.
Regards,
Mike Liddekee
Network Engineer
Humco Holding Group, Inc.
7400 Alumax Dr.
Texarkana, TX 75501
Ph: (903) 831-7808 ext 697
-----Original Message-----
From: Craig Weil [mailto:craig_weil@xxxxxxxxxxx]
Sent: Thursday, September 04, 2003 11:12 AM
To: [ExchangeList]
Subject: [exchangelist] SoBIG
http://www.MSExchange.org/
Hi all,
I run an Exchange 2000 server using Panda Antivirus and have applied all
of the latest patches to the machine. All of my network machines also
have Panda and the latest virus definitions and Windows patches. My
server catches SoBig on a regular basis (last count over 2800
incidences). Lately I've been receiving automated notifications from
other organizations that my mail is undeliverable due to the SoBig
virus. These are emails that I'm not even sending, and I understand
that this is the way SoBig operates, however I'm not sure how I could be
sending these emails given the scenario I first described (updates and
antivirus on all machines). I've even tried running a SoBig.F removal
tool and have found nothing on any of my machines. Anyone have some
advice?
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
mliddekee@xxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
