Because that address is being spoofed by someone else. Nate
> ---------- > From: Kim Schotanus > Reply To: Exchange Discussions > Sent: Monday, September 22, 2003 7:41 AM > To: Exchange Discussions > Subject: RE: [EMAIL PROTECTED] > > Ok, but I checked all my servers, they're clean, scanmail is up to date > and functionning, why am I getting those emails from [EMAIL PROTECTED] > then? > Kim > > > -----Original Message----- > From: Couch, Nate [mailto:[EMAIL PROTECTED] > Sent: maandag 22 september 2003 14:30 > To: Exchange Discussions > Subject: RE: [EMAIL PROTECTED] > > > Wasn't this a sign of either the Mimail or Blaster virus a few weeks ago > that it would send email using the "[EMAIL PROTECTED]"? > > Nate Couch > EDS Messaging > > > ---------- > > From: Kim Schotanus > > Reply To: Exchange Discussions > > Sent: Monday, September 22, 2003 7:19 AM > > To: Exchange Discussions > > Subject: RE: [EMAIL PROTECTED] > > > > Microsoft Mail Internet Headers Version 2.0 > > From: [EMAIL PROTECTED] > > To: [EMAIL PROTECTED] > > Date: Mon, 22 Sep 2003 13:49:04 +0200 > > MIME-Version: 1.0 > > Content-Type: multipart/report; report-type=delivery-status; > > boundary="9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b" > > X-DSNContext: 335a7efd - 4457 - 00000001 - 80040546 > > Message-ID: <[EMAIL PROTECTED]> > > Subject: Delivery Status Notification (Failure) > > > > --9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b > > Content-Type: text/plain; charset=unicode-1-1-utf-7 > > > > --9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b > > Content-Type: message/delivery-status > > > > --9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b > > Content-Type: message/rfc822 > > > > Received: from mail pickup service by morpheus.intas.be with Microsoft > > > SMTPSVC; > > Mon, 22 Sep 2003 13:49:03 +0200 > > thread-index: AcOA/4U6leJxzAlUTPW20EQujsqr6w== > > Thread-Topic: ScanMail Message: To Sender virus found and action > > taken. > > From: <Administrator> > > Sender: <Administrator> > > To: <[EMAIL PROTECTED]> > > Subject: ScanMail Message: To Sender virus found and action taken. > > Date: Mon, 22 Sep 2003 13:49:03 +0200 > > Message-ID: <[EMAIL PROTECTED]> > > MIME-Version: 1.0 > > Content-Type: text/plain; > > charset="utf-8" > > Content-Transfer-Encoding: 7bit > > X-Mailer: Microsoft CDO for Exchange 2000 > > Content-Class: urn:content-classes:message > > Importance: normal > > Priority: normal > > X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300 > > X-OriginalArrivalTime: 22 Sep 2003 11:49:03.0874 (UTC) > > FILETIME=[85593E20:01C380FF] > > > > > > --9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b-- > > > > Kind regards, > > Kim Schotanus > > =========================== > > Kim Schotanus > > Information Systems Manager > > > > INTAS > > Avenue des Arts 58 > > B-1000 Brussels > > Belgium > > > > T. +32 2 549 01 11 > > F. +32 2 549 01 56 > > > > =========================== > > > > > > -----Original Message----- > > From: Andy David [mailto:[EMAIL PROTECTED] > > Sent: maandag 22 september 2003 14:09 > > To: Exchange Discussions > > Subject: Re: [EMAIL PROTECTED] > > > > > > Mongo check headers. > > > > > > ----- Original Message ----- > > From: "Kim Schotanus" <[EMAIL PROTECTED]> > > To: "Exchange Discussions" <[EMAIL PROTECTED]> > > Sent: Monday, September 22, 2003 5:15 AM > > Subject: [EMAIL PROTECTED] > > > > > > Hi there, > > > > I'm getting more and more virusses coming from [EMAIL PROTECTED], we have > > > no address called [EMAIL PROTECTED] (not even as an alias). I cannot > > trace where the mails are coming from... Any ideas? > > > > kim > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode > > =& > > lang=english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode > > =& > > lang=english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode > > =&la > > ng=english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=& > lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&la > ng=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]