E-mails sent from my SBS 2003 server

[Bogdan]

Hi,
We did get a call from our ISp, that a lot of e-mails are being sent from
our location. Then I di take a look at the C:\Program
Files\Exchsrvr\Mailroot\vsi 1\Queue and C:\Program
Files\Exchsrvr\Mailroot\vsi 1\UceArchive and I do see a lot of e-mails
inside, if I do try to delete them, from the queue folder I can not. I ran
Innoculate with the latest signature, and it saus no problem

Please advise as the ISp is going to shut down our service.

 

[Frank Saunders MS-MVP IE,OE/WM]

"Bogdan" <Bogdan@discussions.microsoft.com> wrote in message
news:3B2AD58F-B667-4947-AC1F-2CC7F2FF90A5@microsoft.com...
> Hi,
> We did get a call from our ISp, that a lot of e-mails are being sent from
> our location. Then I di take a look at the C:\Program
> Files\Exchsrvr\Mailroot\vsi 1\Queue and C:\Program
> Files\Exchsrvr\Mailroot\vsi 1\UceArchive and I do see a lot of e-mails
> inside, if I do try to delete them, from the queue folder I can not. I
> ran
> Innoculate with the latest signature, and it saus no problem
>
> Please advise as the ISp is going to shut down our service.

Do a thorough check for malware, following all of the steps at one of these
Web pages.
Help with malware:
All MS-MVP Sites.
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/darnit.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/kb/827315

So How Did I Get Infected Anyway?
For quite a few people it's by installing programs like Messenger Plus,
whose ads for malware don't identify the malware as such and try to convince
you that you owe it to the author. See also:
http://www.wilderssecurity.com/showthread.php?t=27971
Don't ever do a "default" install of anything. Always choose Custom and see
what else is being carried along. Don't install any extras you're not sure
of.

--
Frank Saunders MS-MVP IE,OE/WM
www.fjsmjs.com
Do not send email

 

[Tom [Pepper] Willett]

Shouldn't you be asking in a SBS server newsgroup, or Exchange newsgroup?

"Bogdan" <Bogdan@discussions.microsoft.com> wrote in message
news:3B2AD58F-B667-4947-AC1F-2CC7F2FF90A5@microsoft.com...
> Hi,
> We did get a call from our ISp, that a lot of e-mails are being sent from
> our location. Then I di take a look at the C:\Program
> Files\Exchsrvr\Mailroot\vsi 1\Queue and C:\Program
> Files\Exchsrvr\Mailroot\vsi 1\UceArchive and I do see a lot of e-mails
> inside, if I do try to delete them, from the queue folder I can not. I
> ran
> Innoculate with the latest signature, and it saus no problem
>
> Please advise as the ISp is going to shut down our service.