接收到虚构的公司邮件域名帐户邮件，请问应该怎么处理呢，非常紧急，谢谢！！！！

michaelmo

我司最近收到一些利用我司邮件域名xxxx.com发至公司内同事的帐户，内容如下，如在我司内的AD内只有abcd用户，但并未创建support该用户，请问如何做此过滤呢，是否需要用Anti-Spam软件呢，如果在不安装软件的情况下，利用exchange2003自带的system manager可以实现吗，望各位不吝点教，谢谢！<br>
<br>
Received: from xxxx.com ([66.59.165.195]) by MailServer.stareps.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 5 Sep 2005 11:51:22 +0800<br>
From: <support@xxxx.com><br>
To: <abcd@xxxx.com><br>
Subject: Members Support<br>
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0<br>
Date: Mon, 5 Sep 2005 00:00:24 -0400<br>
MIME-Version: 1.0<br>
Content-Type: multipart/mixed;<br>boundary="----=_NextPart_000_0006_C370DDF0.9AC77549"<br>
X-Priority: 3<br>
X-MSMail-Priority: Normal<br>
Return-Path: <support@xxxx.com><br>
Message-ID: <MAILSERVERj1KQj3KnO00000dcd@MailServer.stareps.com><br>
X-OriginalArrivalTime: 05 Sep 2005 03:51:23.0281 (UTC) FILETIME=[153F5010:01C5B1CD]<br>
<br>
This is a multi-part message in MIME format.<br>
<br>
------=_NextPart_000_0006_C370DDF0.9AC77549<br>
Content-Type: text/html;<br>charset="ISO-8859-1"<br>
Content-Transfer-Encoding: 7bit<br>
<br>
<br>
<br>
<br>
<br>
------=_NextPart_000_0006_C370DDF0.9AC77549<br>
Content-Description: VIRUS_DETECTED_AND_REMOVED_account-report.zip_VIRINFO.TXT<br>
Content-Type: application/octet-stream;<br>name="VIRUS_DETECTED_AND_REMOVED_account-report.zip_VIRINFO.TXT"<br>
Content-Transfer-Encoding: quoted-printable<br>
Content-Disposition: attachment;<br>filename="VIRUS_DETECTED_AND_REMOVED_account-report.zip_VIRINFO.TXT"<br>
<br>
=EF=BB=BF09/05/2005 11:51:35 Original attachment (account-report.zip) =<br>
was Quarantined. A virus was detected and removed from the original =<br>
attachment. You can safely save or delete this replacement attachment.<br>
------=_NextPart_000_0006_C370DDF0.9AC77549--

钉子

这是病毒邮件.WORM_MYTOB.FY,可以参考下:<br>
<a target=_blank href=http://www.trendmicro.com.cn/trendlabs/TrendLabs050623.html>http://www.trendmicro.com.cn/trendlabs/TrendLabs050623.html</a>