Forefront Protection for Exchange 2010 makes it possible to check messages for virusses and spam. Just like every other software Forefront can send messages when an infected message is found. By default Forefront generates an e-mail address during the installation. This may be something you don’t want but where can you change the e-mail address? You would expect that it can be changed in the console but you won’t find it there. To change the e-mail address you will need edit the registry.
When you willl browse to the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Forefront Server Security\Notifications\FromAddress you will find the address which is configured to send the notifications. Change the value to the address you like, reboot the Forefront services and your finished.