Thanks Jim.....Are you saying that this could be some kind of encryption sent "to" the users? I haven't discovered any zip files along with the messages, but just started looking at the abundance of them. Also the bounced messages has null (<>) senders.
> We see this also, except that all of these emails had encrypted .zip files > in them. Our content scanner stopped all of them. Perhaps an new > email/browser plug in for the folks that don't want their email read. > > -----Original Message----- > From: Fred [mailto:[EMAIL PROTECTED] > Sent: Wednesday, May 26, 2004 11:55 AM > To: Exchange Discussions > Subject: [EMAIL PROTECTED] > > > Something freaky going on in my exchange org. We have "3D" attached to the > front of valid email addresses. When I first saw it, I was not too heavily > concerned, but at I dug through my mail logs, I see hundreds almost > thousands a day coming in and going out. E5.5 on NT sp6 (patched and > updated), not relaying, SA on front of Exchange, Trend is scanning. > It looks like just a bunch of spam, and I kind of verified that when I > searched google on it. Any suggestions on what this might be and how to put > it to a halt? Anyone else experience this? I also researched a little on > the Trend site to try and locate a worm that would do this but no luck. > > Thanks in advance, > --Fred > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang > =english > To unsubscribe send a blank email to > %%email.unsub%% > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
