which computer sends spam for careerbuilder.com??
Hi
I still got one customer running 2003 Exchange, and lately the outgoing queue is filling up with spam emails from admin@careerbuilder.com --- a lot around 4000 during a weekend.
But how can I trace these emails back to originating computer? It's only 15 computers in the network - but they have no centralized control, as it is just 15 people sharing office, rather than a company. So i bet some have outdated AV
I still got one customer running 2003 Exchange, and lately the outgoing queue is filling up with spam emails from admin@careerbuilder.com --- a lot around 4000 during a weekend.
But how can I trace these emails back to originating computer? It's only 15 computers in the network - but they have no centralized control, as it is just 15 people sharing office, rather than a company. So i bet some have outdated AV
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
No problems. It is unlikely to be a PC if it is sending via Exchange, but not impossible!
ASKER
instantly showed up some old servicea account for an old bankrupt ISP that had DSL line for a couple of years ago.
Looks better - but will give a couple of hours to make sure. Thanks again
Looks better - but will give a couple of hours to make sure. Thanks again
It usually is an old account that has been long forgotten :)
Fingers crossed that was the only one.
If you want to empty the queues of crap quickly - use aquadmcli.exe:
http://community.spiceworks.com/how_to/show/267
Fingers crossed that was the only one.
If you want to empty the queues of crap quickly - use aquadmcli.exe:
http://community.spiceworks.com/how_to/show/267
Some additional reading for you:
http://alanhardisty.wordpress.com/2010/09/28/increase-in-frequency-of-security-alerts-on-servers-from-hackers-trying-brute-force-password-programs/
http://alanhardisty.wordpress.com/2010/12/01/increase-in-hacker-attempts-on-windows-exchange-servers-one-way-to-slow-them-down/
http://alanhardisty.wordpress.com/2010/09/28/increase-in-frequency-of-security-alerts-on-servers-from-hackers-trying-brute-force-password-programs/
http://alanhardisty.wordpress.com/2010/12/01/increase-in-hacker-attempts-on-windows-exchange-servers-one-way-to-slow-them-down/
ASKER
that did the trick ... no more careerbuilder emails going out
ASKER