I do not understand exactly your problem.
Is someone using one of your emails to send spam? from the user's machine?
Main Topics
Browse All TopicsWe are running Exchange 2003. One of our email addresses is sending out spam. We are having a hard time identifying the address that has been hijacked. Is there a software or other method for identifying the address that is generating it. It is flooding my system. HELP!!!!
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
When you say it is flooding your system--can you see outgoing messages in the queue that are spawn or is it inbound NDRs that are flooding you?
Is it possible that it is actually just a "Joe-Job"? This is when someone, using a completely different server, uses someone elses email account in the "from" line.
If you are receiving NDRs from outside, you can examine the headers to see where the mail originated--whether it was inside your organization or external.
Business Accounts
Answer for Membership
by: SembeePosted on 2006-11-27 at 10:56:24ID: 18021535
How have you identified this problem?
ange/spam- cleanup.as p
One of your accounts has probably been compromised. If you haven't already, change your administrator password and then restart the SMTP service.
Then take a look at my spam cleanup article. http://www.amset.info/exch
Simon.