User is having spoof mail sent from his alias address

[siulong2002]

The problem we seem to have at the moment is that one of our users is getting replies back from users he doesn't know saying he sent them an email. On some occassion the recepients mail server will send a reply out saying that the users has sent them a virus. Now our virus protection is up to date so is the email checking software. We've scanned the users machine as well and found nothing. This has happen to a number of users so we know it's not specific to the users.
Any ideas guys and girls?

 

[sickbay]

We have this quite a lot.

I think that some viruses can disguise the sender of the message (picked randomly from the address book on an infected machine). Thus the apparent sender is not the person who is infected.

More than likely, your recipient is in the address book of an infected user.


Andy

 

[Marcs41]

Erase that alias and create a new one. Let the user notify everyone about it and why he/she had to do it.
You cannot stop spoofed addresses, so you need to work around it.

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!}
How Do I Get Great Answers To my Tek-Tips Questions? See faq219-2884

 

[siulong2002]

On this occassion I can't erase the alias address (MD of the company and all that). I mean if there really isn't a way to get around it without deleting the alias which is the most obvious approach then that's what I'll have to do.
Just thought I'd see if you guys had any idea's before i walk the green mile!

Nah it will be okay.

Thanks guys!