I looked at the message tracking logs, but I don't see anything in the log that tells me which user sent a attachment name which I could trace back. Or am I missing something.
-----Original Message----- From: David, Andy [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 28, 2004 12:41 PM To: Exchange Discussions Subject: RE: Tracking Viruses originator via log files? Message Tracking. -----Original Message----- From: Pfefferkorn, Pete (pfeffepe) [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 28, 2004 12:37 PM To: Exchange Discussions Subject: Tracking Viruses originator via log files? Exchange 5.5 running ScanMail. Got a stupid question. We run ScanMail which is intercepting the MiMail.R virus no problem. The issue we have is tracing it back to the machines that are actually sending it. Our campus is pretty large and tracing back infected machines is a challenge. I can physically go into the mail account that received the message and look at the header but I was wonder if there was an easier way using SMTP logs or something in Exchange to get that information. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
