用户收到不知名的病毒邮件

clone

最近某个用户经常收到带附件的病毒邮件。都是从本地域名发出，请问怎么处理。用的是exchange 2003，跪求帮助

abdxj

看下邮件头

clone

abdxj 发表于 2013-2-27 13:22
看下邮件头

邮件头如下。请问如何处理

Microsoft Mail Internet Headers Version 2.0

Received: from ****.com.cn([113.97.187.150]) by mail.****.com.cn with Microsoft SMTPSVC(6.0.3790.3959);

        Wed, 27 Feb 2013 09:40:17 +0800

From: "The Post Office"<postmaster@****.com.cn>

To: ***@****.com.cn

Subject: Returned mail: Data format error

Date: Wed, 27 Feb 2013 09:33:19 +0800

MIME-Version: 1.0

Content-Type: multipart/mixed;

        boundary="----=_NextPart_000_0003_F3A7B3AB.B42BDDAD"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express6.00.2600.0000

X-MIMEOLE: Produced By Microsoft MimeOLEV6.00.2600.0000

Return-Path: postmaster@****.com.cn

Message-ID: <MAILBySsxVY60mJWEsB0000004b@mail.****.com.cn>

X-OriginalArrivalTime: 27 Feb 201301:40:17.0328 (UTC) FILETIME=[65532300:01CE148B]

------=_NextPart_000_0003_F3A7B3AB.B42BDDAD

Content-Type: text/plain;

        charset=us-ascii

Content-Transfer-Encoding: 7bit

------=_NextPart_000_0003_F3A7B3AB.B42BDDAD

Content-Type: application/octet-stream;

        name="***@****.com.cn"

Content-Transfer-Encoding: base64

Content-Disposition: attachment;

        filename="***@****.com.cn"

------=_NextPart_000_0003_F3A7B3AB.B42BDDAD--

clone

邮件头2

Microsoft Mail Internet Headers Version 2.0
Received: from ****.com.cn ([113.97.185.74]) by mail.****.com.cn with Microsoft SMTPSVC(6.0.3790.3959);
         Thu, 21 Feb 2013 09:30:29 +0800
From: "The Post Office" <MAILER-DAEMON@****.com.cn>
To: ***@****.com.cn
Subject: test
Date: Thu, 21 Feb 2013 09:23:40 +0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
         boundary="----=_NextPart_000_0014_9ED841E8.41723A5C"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Return-Path: MAILER-DAEMON@****.com.cn
Message-ID: <MAILPT3lz5yrFVq9GNS00000572@****.****.com.cn>
X-OriginalArrivalTime: 21 Feb 2013 01:30:29.0968 (UTC) FILETIME=[08C09D00:01CE0FD3]

------=_NextPart_000_0014_9ED841E8.41723A5C
Content-Type: text/plain;
         charset=us-ascii
Content-Transfer-Encoding: 7bit

------=_NextPart_000_0014_9ED841E8.41723A5C
Content-Type: application/octet-stream;
         name="text.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
         filename="text.zip"


------=_NextPart_000_0014_9ED841E8.41723A5C--c

钉子

这类确为病毒或垃圾邮件，请注意。

clone

钉子 发表于 2013-2-28 16:59
这类确为病毒或垃圾邮件，请注意。

请问该如何处理这样的问题，谢谢

钉子

当然是加强病毒邮件过滤了。

clone

钉子 发表于 2013-3-1 11:01
当然是加强病毒邮件过滤了。

请问有什么措施可以加强病毒邮件过滤的，谢谢

neil.fu

使用反垃圾网关了

clone

neil.fu 发表于 2013-3-1 15:28
使用反垃圾网关了

请问哪一款比较好用