Symantec Email Proxy Rejection

[Migration User]

 I have a client that is uses a program called Mapcon. It is an inventory/support/ticket system. It has the capability of sending emails from the program for work orders, PO's, etc. Whenever someone tries to initiate an email through this system, the Symantec Email Proxy message pops up stating that the message was rejected as spam by content filtering.

I have yet to figure out where I need to allow this. It only happens when they try to email through this program.

Any help would be greatly appreciated. If you need more information, please let me know.

Thanks
Mike

[Rafeeq]

 is it a pop3 ? 
check this discussion

https://www-secure.symantec.com/connect/forums/bombarded-symantec-email-proxy-popups-screenshots

[Migration User]

 It's actually an on-site Exchange 2007 server. The program, Mapcon, is run from a mapped drive. When they try to send an email through Mapcon, no matter what computer they are on, they get that message.

I looked over the thread you mentioned and it basically points to issues with malware. Unfortunately, this is not a malware issue. I guess I need to find out if this error is getting pushed to Symantec by the Exchange Server? I am going to look over some other settings and see what I can find out.

I will update this thread as I have more info.

Thanks
Mike

[Rafeeq]

and also let us know if you are able to send the mail when you disable symantec endpoint. 

[Migration User]

Just for testing disable all mail scanning by using antivirus and antispyware policy..

 

[Migration User]

I have found a solution that worked for me > after rebuilding the first machine that had the issue.

Using an application called combofix.exe resolved my issue >>  File that caused the issue > Hidden somehow and
cannot be seen from explorer . Most likely hidden itself from windows explorer.

c:\documents and settings\" username "\ start menu\programs\startup\monxga32.exe .

Combofix also found and additional dll that removed

[Migration User]

I know in our environment the Exchange SMTP server needs to have my server IP's in its' whitelist (even after I configure the SMTP settings in SEPM) for my applications to generate emails.  Just a thought.

Can you attach an image of the pup-up you are seeing?