Sending suspect e-mails to someone you may have infected

Sending suspect e-mails to someone you may have infected

Someone told me I had a Trojan on my computer that infected his server. He asked me to send him any e-mails I had recently received which may have had an exe file. How do I know if his request is legit or if he is a hacker himself?


    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

While it is common for an organization that has been infected to seek out the source of the infection, it is not necessary to send anyone any of your e-mails. If your system is properly defended, incoming e-mail with infected attachments will be detected. In fact, in many organizations, these e-mails never reach the end user, as they are deleted at the e-mail gateway level.

In this case, it sounds like his server got infected by something running locally. It would not be infected just from you or anyone else sending him an infected e-mail -- the Trojan or virus needs to be run in order to infect.

If you want to be more certain that your system is not infected, you can use an antivirus scanner or a Trojan horse scanner (Moosoft, for example) to see if you have malware on your system. If you find something, you could share that information.


For more information on this topic, visit these other resources on searchSecurity:
Featured Topic: Malware lessons
Ask the Expert: How to restrict e-mail attachments
Security Policies Tip: Executable e-mail attachments -- Educate the end user


This was first published in August 2001