OHSTBUC Posted January 24, 2002 Posted January 24, 2002 Here's a new one I've never seen. Just today I started having problems with my Exchange 5.5 server. In my "out" folder in my IMCDATA folder, thousands upon thousands of files that seem to look like emails or undeliverable messages are magically appearing. I opened a few up and they are basically emails being send from strange addresses to strange addresses. I believe the addresses are all bogus and thus fault out. Anyway, they compile to about 25,000 and then stop. If I delete them they come back. They all show subjects as WELCOME TO VBGOOD. It seems to be a worm to me. Also it seems to have affected the Windows NT side of the server. I can't seem to ping other machines.....however I can browse in Network Neighborhood. One more thing is I noticed an error in the event manager saying something about these files in the OUT folder not being able to be spooled and because of this duplicate emails can start being sent. Please help.......I might start off by installing the latest service packs for NT and Exchange....I was also told that this server had previously been infected with the CODE RED. (It is only used for Exchange now and not IIS.
BAH Posted January 24, 2002 Posted January 24, 2002 Sounds like you got something nastly lurking in there, have you got a virus checker running, if so is it up to date...?I think i would be scanning the sever and any clients connected to it.
XPerties Posted January 24, 2002 Posted January 24, 2002 also get a trojan scanner called "The Cleaner" and scan all PC around/connected to yours.-Xperties
FthrJACK Posted January 25, 2002 Posted January 25, 2002 TD AM's Personal Communication Center... Welcome to the Personal Communication Center of TD AM. Add ... clicking on this button.Email Me 1@http://www.vbgood.com, Send me an ICQ Message, lets start talking ... wwp.icq.com/82654353[/quote:fe2c7ab7f0]sounds dodgy as hell...
OHSTBUC Posted January 25, 2002 Author Posted January 25, 2002 I found a trial version of THE CLEANER which provides full functionality for 30 days. However, its got updates from 99 - very old IMO. Also it tells me that there are no available updates. Does anyone know if the latest updates are from 1999?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now