• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1261
  • Last Modified:

Advanced Mass Sender installed on Exchange Server

Does anyone know what Advanced Mass Sender program is? I found it installed on my Exchange Server this morning, together with winrar and a txt file 12345.txt with about 500 emails in it. It seems to be a bulk mail program and it says something about Bank online, Chase bank. I checked around my office and nobody installed it, to you think it may be from a hacker, have you heard about this before? It is an evaluation program for 15 days. Thanks!
0
Bob Macpherson
Asked:
Bob Macpherson
  • 2
  • 2
1 Solution
 
jss1199Commented:
Hi Claudelu,

Advanced Mass Sender is a program used to send bulk emails, as you suggested.  The publisher is http://www.kbbsoftware.com/.

Obviously, someone was using your Exchange server to distribute mail but I doubt it was a hacker - more likley an internal person.  A hacker has much easier ways to go about distributing mail than to hack into your system, gain access to lauch an install program, and then run the program (AMS is a GUI program - not command line).

Look at the properties of the files in question - who is the owner?  Who, besides yourself, has access to the Exchange server?  Start looking internally...




Cheers!
0
 
Bob MacphersonAuthor Commented:
That what made me think was a hacker when I looked at Properties, it's a Russian name, with a ru email, even though the software web site in Properties says www.kbbsoftware.com.
0
 
jss1199Commented:
Right Click on the files and select properties, Security tab, Advanced, Owner tab - what user is listed there?  

The Summary of the file propeties could be anything and does not tell you who placed the file on the drive...This could be the shareware version of the program with a crack (available fom internet) that takes away the limitations of the eval software....
0
 
Bob MacphersonAuthor Commented:
No, owner there is Domain Administrator... I will do more checking around my office and if I don't find anyone I will uninstall the software. Thanks!
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now