Relay Victim

[jonwilbanks]

Hi all,
My Exchange2K server was used to relay mail by an unknown source. I think I have the relaying shutdown but now I have thousands of emails in the queue and I can't delete them. When I try to remove them the console locks up. The server has slowed down to a crawl and network activity on the servers NIC is constant. Is there any docs on how to clean up after you've been hit?

Any help would be appreciated.

Jon

 

[Marcs41]

Try to remove them in steps of 10, 20 or more (to test), the process is a lot less intensive then. [sub]If 'something' 'somewhere' gives 'some' error, excpect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC! - Marc[/sub]

 

[ianbla]

Have you got SQL on the server, we were hit by the Slammer virus and the server went mad busy. Worth a look. Even if it only has the SQL MSDE it can be infected.