Help - xxx is tacked on at the end of outgoing external emails

[JAQK]

Outlook 2000, Exchange 2000, Exchange 2003 domain controllers


We're not using any disclaimer text, but all of a sudden, "xxx", without the
quotes is being added to outgoing email messages at the end of outgoing
emails, all the way at the bottom, a few lines after the last portion of the
message text.

This whole thing is very bizarre and we've already seen an instance of our
outgoing email getting blocked at the destination because of this.

Could this be an indication of malware/ virus infection? Our enterprise
anti-virus hasn't detected anything.

Thank you.

 

[Nuevo]

Has someone been testing event sinks? Do you have any AV or Spam appliance
that you could be applying this text? Does it occur on internal emails?

Nue

 

[JAQK]

It does not happen with internal emails. Not aware of anything that would be
applying this text. Maybe it's our spam filtering service ?!

 

[Nuevo]

Since it is not internal the odds are that it is the service.

Nue

 

[Andy David - MVP]

It does not happen with internal emails. Not aware of anything that would be
applying this text. Maybe it's our spam filtering service ?!

Why would you be sending outbound mail through your SPAM filtering
service?

Look through the headers of an email sent to an external address and
see what hops it is taking and maybe you can figure this out.
Sounds like its something on your SMTP gateways.

 

[Randy]

Are you using forwardig mails to a smarthost which inturn sends mail to
the outside world. Check the message header and see where it stands a
chance to get some information like this. Try disabling that service or
even check the IIS metabase to see if someone has been playing with
event sinks.

Regards
Randy