Outbound Messages awaiting conversion queue filling up

[lizdunn]

I have been deleting messages from my outgoing messages awaiting delivery queue with the <> originator for some time now. This past weekend, our exchange server froze, i couldn't shut down the imc or even open the exchange administror, and users could not connect to outlook. The server was shut down and came backup, everything seemed fine. Now, there are tons of emails in the awaiting conversion queue, addresses all in CAPS, with our email address as destination (unknown usernames)!? This just started yesterday.

We have exchange 5.5, on NT 4.0 server, running TrendMicro ScanMail for Exchange

Can anyone tell me what's going on and how i can fix this?

Thank you.

 

[cmeagan656]

Reverse NDR attack. See thread10-847810.

 

[Todd451]

About a week ago we started getting this message in the event viewer and we noticed a build up in the 'Outbound Awaiting Conversion queue'

attempt to remove processed messages from the outbound store queue has failed. The removal will be retried later. If the messages are not removed before the service is shut down, the mail will be resent at service startup causing duplicate mail.

Has anyone else ever seen this issue.. If so any help on this would be great

Todd

 

[Todd451]

sorry I didnt mean to post that message uder you.