Incoming mail is being changed by intruder

S

Scotty P

our incoming mail path(to our server) keeps changing
itself somehow, from our POP3 website to "localhost".
This happens with random employee's and is usually found
by me when they complain about not receiving e-mail. Then
i check their account settings and sure enough the
imcoming mail setting has been changed to local host and
the account name now has the path added to the user name.
I think this is the work of a virus or someone else who
has gained access to our system, or can someone explain
why? e-mail to [email protected] or [email protected]
thanks!
 
L

Lanwench [MVP - Exchange]

Scotty said:
our incoming mail path(to our server) keeps changing
itself somehow, from our POP3 website to "localhost".
This happens with random employee's and is usually found
by me when they complain about not receiving e-mail. Then
i check their account settings and sure enough the
imcoming mail setting has been changed to local host and
the account name now has the path added to the user name.
I think this is the work of a virus or someone else who
has gained access to our system, or can someone explain
why? e-mail to ccs2mvp@____ or spetersen@________
thanks!
Click to expand...

No, it's your antivirus software, antispam software, or something else you
have installed. What antivirus software do you use? What version of it? Most
new AV programs scan mail without this 'localhost' proxy method (which can
cause problems). See if your mfr has a newer version that doesn't use the
localhost - or disable mail scanning in the product.

Likewise if it's antispam sw.

Sorry, no email replies - ask in a group, read the answer in the group. That
way everyone can participate/benefit. Also note: posting your valid e-mail
address in a newsgroup post, or in your news account settings, is a surefire
way to get spam and SWEN and other viruses sent to you....see
http://www.mailmsg.com/SPAM_munging.htm for help in the future, but note
that now that your address is out there, there's not much you can do other
than changing your address.
 
Top