But there is no user called "info" it is strictly a local group name. As far as I knew, No one is able to send on behalf of that group name. Even though I am as proactive and diligent as I can be, should I assume that someone on my network has a virus, and that is the cause?
Larry -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, March 19, 2004 3:45 PM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] How do I know if an address is being Forged? >I try to use the archive files as much as possible, and I did find a >posting, but am still not sure if it covers my situation. I have users >that belong to a group called "Info" that regularly get messages from >other sites stating that they have been sent a virus by the "Info" >address. Is this what is meant by our "Info" address is being forged? No. Your "info" address is forged if it is used by someone without authorization. If someone with authorization to use the address gets a virus and sends it out, then it was not forged, and you may receive a virus notification. However, if someone without authorization to use the address gets a virus and sends out copies from your "info" address, then it was forged. >And if so is there anything I can do about it? Below is a sample: All you can do is track down the sender, inform them that they have a virus, and hope they fix it. >-----Original Message----- >From: [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED] >Sent: Thursday, March 18, 2004 9:48 AM >To: [EMAIL PROTECTED] >Subject: Virus Alert > >A virus was found either in the body of your message or in the message >attachment. This is a bogus virus notification. Since it does not give any details about what was detected (virus name, headers, etc.), there is no way to tell if your address was forged, so it can be ignored. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.624 / Virus Database: 401 - Release Date: 3/15/2004 To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
