Endpoint Protection

Symantec End Point version used in my company is 12.1.1101.401. Some time in the morning when the staff tries to send the email, they are getting the following message from Symantec Email Proxy: Please guide me to solve this issue.

Many Unexpected Pop-Ups from Symantec Email Proxy are Displayed

http://www.symantec.com/business/support/index?page=content&id=TECH122425

Or

Scan your system

It is possible your system is infected. Spam is often sent from botnets of compromised computers. If large numbers of the errors listed above are appearing I suggest you treat this as an infection.

Many Unexpected Pop-Ups from Symantec Email Proxy are Displayed

http://www.symantec.com/business/support/index?pag...

Is your system infected? Symantec tools to help clear an infection

https://www-secure.symantec.com/connect/forums/you...

The biggest question: is this an internal or external mail server? 

If it is an internal mail server that you control, please make suire that it is in fact functioning and not throwing up a bunch of errors.

If it is an external mail server - is it only one server?  Or ar eall your maailclients going to different servers? 

If it is all clients and many servers, and these messages pop up when the user has not in fact sent any mails, then chances are you are infected by a spam-sending threat. 

If it is everybody and one interenal mail server, and the messages appear whenever a mail is sent via Outlook, chances are that the SEP email plug-in is just making visible a problem on the mail server itself.

Hope this helps!

Hello,

If subject lines and recipients are displayed, examine them to determine if mails were intentionally sent from the mail client.

If not, isolate the computer from the network and follow best practice to determine if a currently undetected threat is operating on this computer. Checking what program is using common mail ports (performing anetstat -ao from the command line to learn what process is communicating on port 25) is often the best first step. 

Reference: http://www.symantec.com/docs/TECH122425

Also, check this Thread: https://www-secure.symantec.com/connect/forums/symantec-email-proxy-rejection-intermittent-100310

Chances are that the computer is infected and is sending out spam. I recommend putting the very latest definitions onto that computer, isolating it from the network, and performing a full system scan in safe mode. 

Hope that helps!!