"Luke Catania \(TEC\)" wrote: > Even though the list servers say the > virus attachment was stripped I found it still embedded email when I run the > Message Properties and Message Source options. Luke, I'm working on getting a filter program installed on our mailing list server so we can filter out these messages. I'd like to try to clarify exactly what is happening here. Currently, our mailing list server isn't filtering out the virus. Those messages are coming from other machines to whom the original message is being sent by our server. Specifically, the chain of events looks like this: 1) A message containing the virus is sent to the visad mailing list 2) the visad list server sends copies of the message out to everyone on the list 3) A machine with 'ScanMail for Microsoft Exchange' installed receives a copy of the message and detects the virus. It then: a) forwards the message on to the person who was supposed to receive the message b) saves a copy of the attachment to that remote machine's disk (not to our list server's disk or to your machine's disk) c) sends an email message to the original recipient detailing what has been done, with a carbon copy mailed to the original sender (which in this case is <visad-list@xxxxxxxxxxxxx>) d) the mailing list server receives the ScanMail message and forwards it to everyone in the list. Note that our mailing list software has nothing to do with these ScanMail messages. They're coming from other machines on only apply to those machines. ScanMail's action is appropriate for person-to-person communications, but isn't terribly useful when it's replying to a mailing list. I'm working on filtering out both these annoying viruses and the followup ScanMail messages.