Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

email virus problems

Mar 6, 2006 11:16AM PST

I am a full time volunteer with a non profit organization in Australia. I do a good portion of the IT here (with another volunteer), however we have had little training for it. Much of what we know is from doing it. Our network runs Terminal Services on Windows Server 2003, we use Microsoft Antispyware on all machines, as well as Norman Anti-Virus installed on the network.

We bought a Barracuda email spam filter about 1.5 years ago and it has been going well for us for some time. Recently, however, with the release of the sober virus, we have been having some problems. Our organizations office is mixed with both desktops and personal laptops being used for work purposes. So once we realized that we had sober, we did virus checks on all work machines, personal machines, and all servers, cleaning all of them. This seemed to fix it, but after returning from a recent trip I have found that our spam count has gone through the roof, while a lot of spam is getting through somehow.

During the sober virus problem time, our mail server was blacklisted causing more problems. So we requested that be re-evaluated after we clear the virus. Now, I have found that the Barracuda Spam Filter caught 74,000 spam emails coming from the IP of our own Linux mail/SME server. The emails were all blocked, but I am also finding that some have been going through on previous days, saying they are bounce emails being sent by our email server that are being ''bounced'' (possibly because of the blacklisting of our server?).

What are my possibilites here? Is there an virus on our linux box? Could someone have re-infected there laptop and it got back into our system? We have had no red flags come up from our virus systems at all. From what I know of how sober works, it just finds the closest email server and sends spam out through there. I just don't have enough information and understanding to know what the exact problem is and how to fix it.

Discussion is locked

- Collapse -
Take a page from the ISPs and ...
Mar 6, 2006 11:33AM PST

Don't allow mail to be sent if the machine is outside your LAN. Any mail server exposed to the internet could be hijacked and be used to send spam. The newest trick is to bounce or mirror the rejections off your email server. If you don't expose the mail server portion to the internet, then you'll recover.

Bob

- Collapse -
mail service
Mar 6, 2006 1:40PM PST

Thanks for your reply Bob. Talking to my associate, i found that we don't use the mail service on this machine, but we haven't figured out how to stop it. It is a linux SME server. Any ideas?

- Collapse -
In addition
Mar 6, 2006 12:03PM PST

In addition to what Bob said, I would have the virus protection on every machine as well.

I work for a business and they only had the virus protection on the server and people were checking their emails and some had viruses and they spread since they were already in the network.

I would recommend virus protection for every computer.
I would also recommend using C W Shredder to help remove some and you can also use SPYBOT SEARCH & DESTROY. Another good spyware remover is AD AWARE and one that stops spyware from getting into your computer is SPYWARE BLASTER. Then when all else fails you can get HIJACKTHIS.

If you use all these tools it will not elminate spyware from getting into your computer, but it will help. Some spyware gets into your computer using the Macromedia Flash player. If you feel that you still might have spyware in your computer, then you can go to TREND MICRO to do another online scan.


Hope this helps


Rick