General discussion

Locked

non-stop incoming e-mail message

By p_cheatum ·
For three days, I have had an e-mail message coming in to my MS Exchange e-mail server every 10 minutes. My Norton Antivirus Corporate Edition is catching the Badtrans virus included in the e-mail and quarantining it each time it comes in. I cannot locate any information in Exchange or Norton as to where this message is originating from so I stop it from continuing to come in every 10 minutes. I am a rookie with Exchange so maybe there is some place to look that I am not aware of. I need to know how to stop this incoming e-mail. (At least Norton is catching the virus so we have not gotten infected!) Thank You!

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

non-stop incoming e-mail message

by dmiles In reply to non-stop incoming e-mail ...

The message originated from another machine that was infected and sent out the email from that persons contacts list,check the sever to check the virus and start the process of deleting it.
Check the anti-virus software manufacturer's web site for ereadicating the virus,if the machine is on a network it is best to take the machine off the network connection.
Check the C:\Windows directory to see if the file exist and you will see how large it is

Collapse -

non-stop incoming e-mail message

by p_cheatum In reply to non-stop incoming e-mail ...

Poster rated this answer

Collapse -

non-stop incoming e-mail message

by chris hirst In reply to non-stop incoming e-mail ...

This is probably a similar problem that occurs with McAfee's AVD where the On Access Scan picks up the infected message from the incoming queue and quarantines it before the message has completed downloading. This will cause a download error with the Exchange IMC and the message will not be removed from the ISP's SMTP server and it will be delivered the next time that the IMC connects. The problem can be solved by excluding the queue folders from the on-access scanner. The folder location will depend on your individual setup of exchange but it will be called 'Drive:'\exchsrvr\imcdata\ and there will be sub-folders. You do not need to worry about not scanning these folders as this is the working area of the Mail Scanner.
To find the senderof the message open one of the quarantined files in Notepad (the payload will note run as this will be a MIME\UUEncoded text file) then you can read the headers of the message.

Hope this helps

Chris

Collapse -

non-stop incoming e-mail message

by p_cheatum In reply to non-stop incoming e-mail ...

Thanks. I learn something new everyday.

Collapse -

non-stop incoming e-mail message

by p_cheatum In reply to non-stop incoming e-mail ...

This question was closed by the author

Back to Software Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums