Yesterday a virus spoofed one of our MW addresses, from somewhere outside our network, and sent an email that our members mailing list accepted. It therefore started delivering it to our membership list. We caught it soon after, it was halted in process, and all the remaining spooled messages were deleted. Therefore, it was not delivered to everyone... but, many did receive the email before we stopped it.
We have now placed extra security on our list. Previously, it was set to allow only the moderator address to send to the list (that was the address the virus spoofed). Now no address can send to the list without an additional password, so this should not happen again. Furthermore, I am not sure why the virus got through to our email server in the first place to be sent, as all our incoming SMTP traffic is filtered in real time for viruses. However, it may be that the virus was something new that was not in our virus definitions yet, and just happened to come through since the last time our filtering system's definitions were updated.
In any event, anyone who received the email with the attached .scr file and actually opened or ran the attachment, should do a complete system scan with Norton, McAfee, or another similar virus scanner with updated virus definitions. If you do not have a virus scanner (using the Internet you should, along with ad-ware/spyware scanning tools like Ad-Aware).
We apologize for any inconvenience.
Norton trial download:
http://nct.symantecstore.com/fulfill/0001.107
McAfee download:
http://download.mcafee.com/us/?cid=9046
AVG Free Edition:
http://www.grisoft.com/us/us_dwnl_free.php
Ad-Aware (Ad-ware/Spyware removal tool):
http://download.com.com/3000-2144-10...tml?part=69274