Security

Ask something
Discussion Locked

Weird Problem

0 helpful
5 replies

by inkster 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Having a weird problem with two users. Wondering if anyone has come across the same problem or has any idea on finding out the cause.

Our Antivirus program keeps giving me notifications that it keeps catching the klez virus. The weird thing aboutit, is that the notification says they are coming from two of our users, but they are not sending any email through Outlook, and no email is generated in the Sent Items folder.

The Exchange Logs are of no use, our firewall and IDS, not my doing, are not operational yet.

Anyone have any suggestions?

5 replies

by satishcp

Klez uses the MAPI component to send the mails and it need do it through outlook/outlook express interface.

Clean the user systems with klez virus remover kit from mcafee or any other antivirus vendor

by kristin

A friend of my experienced the virus attack. She's reinstalled the MS Exchange server plus updated all the workstations with MS Security patch on IE but yet when all users connected to the Exchange server, the virus will propagating. This is very annoying. Anyone out there that could help??

by aclopez5

One particular "feature" of this virus is its ability to spoof the sender's email address. That means that when it creates an email, it changes the senders email address to hide where it's coming from.

by isys

If they have Hotmail, Yahoo Mail or something similar, it could be the source.

This discussion is closed to new replies.