Exchange 5.5 sending spam emails. IMC out folder is full

[NEWNIX1]

It appears that something has hacked my Exchange server and is causing it to generate Spam emails and attempts to send them out. The IMCData\out folder gets full to the point that it brings the server to it's knees. This is the 2nd time I've seen this happen (different server). I couldn't figure out the other one either.

I've check it, and all network PC's for viruses. I have checked The current running Tasks and couldn't notice anything out of the ordinary. I've also checked the services and couldn't see anything unusual in there either. At this point I have thrown my hands up because I can't think of anything else.

All I have found on the net is Spam attacking email accounts/mailboxes. I haven't see anything on something turning an Exchange server into a Spam generating server???????????

Someone please help.

 

[Steve Bowman]

Take a look at faq10-1779

Steve Bowman
steve.bowman@ultraex.com

 

[NEWNIX1]

That link didn't go anywhere.

 

[Steve Bowman]

Go to the FAQ tab then down to the FAQ(s) about relaying. I would suggest that you are not hacked, But are open for relay. Meaning you are allowing external users to SMTP through your Exchange. This is a common setup issue. SPAMMERS are always scanning for open relays (an easy task) and will use them when found until closed. You can go to

http://www.abuse.net/relay.html

and run a test to see if you are open for relay.

Steve Bowman
steve.bowman@ultraex.com

 

[Robnhood]

Try this link

http://www.securelyspeaking.com/modules.php?name=Content&pa=showpage&pid=81

Craig

http://www.SecurelySpeaking.com