Outlook virus taking down IMAP in my MMS

[rejackson]

We have a virus hitting us at 930am 3 days in a row. It seems to be taking over Outlook and sending emails with zip files attached using hte address books. It is doing this in the Avaya outlook account too. It only hits for about an hour but somehow it is taking th email service down in the MMS. In the status display like below it says stopped instead of running.

IMAP/SMTP Status
Internet Message status: Running

Percent of media space in use (contains queues): 8.0%
Number of incoming messages in queue: 24
Number of outgoing messages in queue: 0
Number of SMTP receive/send sessions running: 0/0
Number of POP3 client retrieval sessions running: 0
Number of IMAP4 client retrieval sessions running: 1052
Number of TUI-related IMAP4 sessions running: 1

I get this kind of thing in the SMTP log. I cannot tell if the authentication is really down or the service is down so authentication is failng. Is there a way to start the IMAP/SMTP service again without a reboot. Any clues on how I can block this would be appreciated.



Jan 14 10:20:12 mss1 smtp[23637]: -06:00 2015 274 1 .mm | 0 Temporarily Invalid local recip (4=IS_LOCAL_EMAIL_TEMPORARY_PROBLEM) from 'Susan.French@mss1.ryanco.com' -> 'Patrick.Nash@mss1.ryanco.com'
Jan 14 10:20:12 mss1 smtp[23637]: -06:00 2015 300 1 .mm | 0 <--- 451 Temporary Problem Authenticating User
Jan 14 10:20:14 mss1 smtp[25645]: -06:00 2015 291 1 .mm | 0 Temporarily Invalid local recip (4=IS_LOCAL_EMAIL_TEMPORARY_PROBLEM) from 'postmaster@mss1.ryanco.com' -> 'Susan.French@mss1.ryanco.com'
Jan 14 10:20:14 mss1 smtp[25645]: -06:00 2015 302 1 .mm | 0 <--- 451 Temporary Problem Authenticating User
Jan 14 10:20:14 mss1 smtp[25645]: -06:00 2015 320 1 .mm | 0 eof from smtp <107>
Jan 14 10:20:14 mss1 smtp[25645]: -06:00 2015 320 1 .mm | 0 I/O Error from mas1 rc [74] 0 bytes 00:00:00
Jan 14 10:20:14 mss1 smtp[23637]: -06:00 2015 320 1 .mm | 0 eof from smtp <107>
Jan 14 10:20:14 mss1 smtp[23637]: -06:00 2015 320 1 .mm | 0 I/O Error from mas1 rc [74] 0 bytes 00:00:00
Jan 14 10:20:16 mss1 smtp[27429]: -06:00 2015 778 1 .mm | 0 Temporarily Invalid local recip (4=IS_LOCAL_EMAIL_TEMPORARY_PROBLEM) from 'postmaster@mss1.ryanco.com' -> 'Elizabeth.Bosshard@mss1.ryanco.com'
Jan 14 10:20:16 mss1 smtp[27429]: -06:00 2015 778 1 .mm | 0 <--- 451 Temporary Problem Authenticating User
Jan 14 10:20:17 mss1 smtp[29323]: -06:00 2015 014 1 .mm | 0 Deny delivery string ->
Jan 14 10:20:17 mss1 smtp[29323]: -06:00 2015 038 1 .mm | 0 eof from smtp <2>
Jan 14 10:20:17 mss1 smtp[29323]: -06:00 2015 038 1 .mm | 0 I/O Error from mas1 rc [74] 0 bytes 00:00:00
Jan 14 10:20:17 mss1 smtp[27429]: -06:00 2015 038 1 .mm | 0 eof from smtp <107>
Jan 14 10:20:17 mss1 smtp[27429]: -06:00 2015 038 1 .mm | 0 I/O Error from mas1 rc [74] 0 bytes 00:00:00
Jan 14 10:21:17 mss1 smtp[29816]: -06:00 2015 314 1 .mm | 0 Temporarily Invalid local recip (4=IS_LOCAL_EMAIL_TEMPORARY_PROBLEM) from 'Susan.French@mss1.ryanco.com'

 

[KenMeans]

turn off imap in the mss or remove the client from outlook.

Ken Means

http://www.tel-is.com

"I find that the harder I work, the more luck I seem to have."
- Thomas Jefferson (1743-1826)