Question : Virus/worm in MS Exchange 2007 on SBS 2008 attaching unknown BCC addresses

System is running Small Business Server 2008 with Exchange 2007 using AuthSMTP as a smart host for delivery.

All messages are coming into the Queue with a single 'To' address, no BCC addresses. AuthSMTP is showing that each message has several (5-20 or so) BCC addresses. Can't find any evidence of this in Exchange. Ran ESET online scan and it came up clean. Installed Trend Micro sbs anti virus, ran scan... also came up clean. I appreciate any assistance that anyone might deliver with diagnosing this bug.

Answer : Virus/worm in MS Exchange 2007 on SBS 2008 attaching unknown BCC addresses

If it were me, I'd set up a proxy server at the network edge that can trap protocol traffic and log it. You can *see* what Exchange is sending as it sends it at that point. If you don't see BCC addresses in the SMTP envelope (which I suspect you won't) then you can push back on AuthSMTP.

-Cliff