Advanced Mass Sender installed on Exchange Server

Does anyone know what Advanced Mass Sender program is? I found it installed on my Exchange Server this morning, together with winrar and a txt file 12345.txt with about 500 emails in it. It seems to be a bulk mail program and it says something about Bank online, Chase bank. I checked around my office and nobody installed it, to you think it may be from a hacker, have you heard about this before? It is an evaluation program for 15 days. Thanks!
Bob MacphersonAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

jss1199Commented:
Hi Claudelu,

Advanced Mass Sender is a program used to send bulk emails, as you suggested.  The publisher is http://www.kbbsoftware.com/.

Obviously, someone was using your Exchange server to distribute mail but I doubt it was a hacker - more likley an internal person.  A hacker has much easier ways to go about distributing mail than to hack into your system, gain access to lauch an install program, and then run the program (AMS is a GUI program - not command line).

Look at the properties of the files in question - who is the owner?  Who, besides yourself, has access to the Exchange server?  Start looking internally...




Cheers!

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Bob MacphersonAuthor Commented:
That what made me think was a hacker when I looked at Properties, it's a Russian name, with a ru email, even though the software web site in Properties says www.kbbsoftware.com.
jss1199Commented:
Right Click on the files and select properties, Security tab, Advanced, Owner tab - what user is listed there?  

The Summary of the file propeties could be anything and does not tell you who placed the file on the drive...This could be the shareware version of the program with a crack (available fom internet) that takes away the limitations of the eval software....
Bob MacphersonAuthor Commented:
No, owner there is Domain Administrator... I will do more checking around my office and if I don't find anyone I will uninstall the software. Thanks!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.