Detection of an email virus by adding a trap address to email address lists

摘要

The address of a virus notification program on a email server is added to the address book of all computers covered by the detection service. When an email virus is active, it propagates by sending further emails to all addresses in the infected computer's email address book. If the virus notification program receives an email at this address then it concludes that a virus is active and warns the user or administrator. The server may halt the transmission of all email messages from the local network. Outgoing messages may be queued for a short time so that their transmission can be halted when a virus is detected. The virus notification program may be located at an internet site.