Re: [IMail Forum] Deleted Users and Viruses

[JustRight]

Hi Scott:   You ask how it is I know its going to uses on my network.  In the antivirus for my IMail where it has send to defualt account or something to that effect (I am not infront of the server now), it allows for reports to be sent to an account.   An example below.   This account below is active but some others that were deleted still receive mail.   ----- Original Message ----- From: Postmaster To: [EMAIL PROTECTED] Sent: Monday, February 23, 2004 4:45 PM Subject: Virus Detected Message contained a virus Virus detected - [EMAIL PROTECTED] [EMAIL PROTECTED] The message was Redirected The message was from <[EMAIL PROTECTED]> The message was to [EMAIL PROTECTED] Subject: your account                         aceftsai Message-Id: <[EMAIL PROTECTED]>     ----- Original Message ----- From: R. Scott Perry To: [EMAIL PROTECTED] Sent: Wednesday, February 25, 2004 9:40 AM Subject: Re: [IMail Forum] Deleted Users and Viruses >Recently I noticed that even after I removed past users from my email >server, I still receive mail addressed to them.  There are not copies of >their past directories or any trace of their account in the registry listing. > >In most cases viruses are being sent to those accounts and in my opiniun >they should not have reached the server is the accounts don't exist. > >Can any one explain? Well, you'll need to explain further.  If the accounts do not exist, how do you know that E-mail is being sent to them? >I noticed that an account called ><mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED] keeps sending mail to uses >on my system.  Not sure if it is sending out as well.  I have no account >under that name. That sounds like Mimail, which can uses an E-mail address of [EMAIL PROTECTED]  Note that most recent common viruses forge the return address, so that doesn't mean that someone sent the virus from your server. Note that there is a big difference between E-mail addressed *from* a user and E-mail addressed *to* a user.  :)  If the issue is just that there are E-mails somewhere on the Internet being sent *from* an admin@ address on your domain, you can ignore the issue (there is very little you can do about it). >I suppect a worm, but have Norton Antivirus running in the back ground on >the server. It seems to stop most of the viruses but in some case don't >seem to recognise those in some .ZIP files. Note that Norton AntiVirus won't properly detect viruses in E-mails (and in some cases may cause problems, such as deleting E-mails with no virus, because they happen to be in the same .mbx file that a virus is in).                                                     -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/