Recipients Recieving e-mails they should not? Help

[WinNT511]

Over the last serveral days a few users have sent e-mail to there clients and they have reported the the e-mail in question was also delivered to other recipients that should of not gotten these e-mails.

These recipients was not listed in the CC: or BCC: fields and was verified by myself while looking at there desktops. This affected about 3 Users including myself. The only common item i can find is that e-mails are being sent to other users listed in the global address list and personal outlook contacts. But these recipients were not listed in the fields in the e-mails in question.

I have SMTP logging ebabled on the server but the logs are only yielding information regarding the sent e-mails. Also the log time format is off 4 hours which is not normal even though the time on the server is correct.

I only thing I can think of is somehow the exchange server is attaching e-mail recipients to the message header in random sent e-mails. (But how would this be corrected)??

addiotnal Information:

I did notice in the log that 2 Trojans were deleted by our AV scanner and this is when this strange behavior started with the e-mails.

Ran AV scans on the exchanghe server and pc in question and all were clean.

I would like to correct this issue ASAP as some of the e-mails we send are of a confidential nature and I can not have random e-mails being sent to recipients they are not intended.

Please Help.

WINNT 511

 

[jamesbird]

Is it posible the mail received by the 'wrong' recipient has been forwarded by the 'valid' recipient i.e. the problem is at the far end?
James

 

[WinNT511]

The wrong Recipient? The e-mail is being sent to the recipients addressed in the To: CC: and BCC: Fields.

What is happening is that random e-mails are being sent to recipients that are not populated in these fields. In Otherwords I can send a e-mail to "Fred" and "Sally" they both get the e-mail but "Frank" would also recieve this e-mail even though FRank was not listed in the above fields.

I do not think the problem is on the far end connection.

I have re-booted the server since thsi problem sarted to happen and there seems to be no issues so far? I would still like some guidence this issue.

Thnaks,

WIINT 511

 

[jamesbird]

My question was - is 'Sally' or 'Fred' inadvertantly forwarding it on to 'Frank'?

All the best
James

 

[WinNT511]

No They are not forwarding the e-mail inadvertantly to other recipients. This has been cofirmed in the SMTP logs and message tracking on the server and by looking into the sent itemms folder (Outlook) as the users pc's in question.

It seems the exchange server is attaching e-mail recipients to the message header in random sent e-mails. The only common thread here is that the random e-mails are sent to recipents listed in either Global Address Lists or a users personal address book.