Very astute diagnosis, Dilbert. Kudos.

<p>Hello. I have pegasus mail set up on server, where are also all users mail folders.</p><p>I set up users on PC-s in company using wssetup. All is well :)</p><p>This setup has worked without any problem for the last two years.</p><p>Now suddenly all settings from all users are run over, more than once a day.</p><p>Instead of real pop server it inserts 127.0.0.1 (instead of 172.20.1.19, which is the mail server ip address).</p><p>And in username field it inserts #172.20.1.19 after username, so it spells like this: user.surname@xyz.com#172.20.1.19.</p><p> </p><p>This also happens on SMTP settings.</p><p> </p><p>HOW? I'm stumped. Is there some admin option to generaly set this for all users, so someone is doing this (accidentaly, I think). Or something else. </p><p>After I corrected all settings on all users, everything worked for a while, then all settings were lost again.</p><p> </p><p>I noticed something else, that this morning username had #172.20.1.19 inserted twice on the end..</p><p>So like something is being done periodically..</p><p> </p><p> Once I corrected all users by pegasus mail interface,  once I just corrected parameters in *.pnd files. Nothing works permanently.</p><p> </p><p>HELP :( </p>

<p>Looks very much like an AV mail scanner is altering the settings to act as a proxy POP host.</p><p>It may be on one of the clients.</p><p>You should find it and turn it off.</p><p>Also you could set the files read only, or remove write access for the users. </p>

<p>WooHoo  [:P]</p><p>I installed Avast antivirus and selected to protect e-mail during installation.</p><p>Just disabled it, and now all is well again.</p><p>Thank you. </p>