Something weird is going on with our exchange server (2003). last week i had one user's primary smtp email address change from what is should be to an old, temporary address from an old account of his.
Today, another user had some replys come back undeliverable because somehow his address changed from, "email@example.com" to "firstname.lastname@example.org". his full, first name was somehow appended as a suffix onto the actual email address. i've seen this type of distortion in the past usually with malware at work.
After that today, i decided to look at all of our user's exchange email addresses and found one other that was "goofy". There were duplicates with the domain name misspelled.
I'm trying not to panic about this but now I'm concerned that we've got a bug inside here. Do any of these symptoms look familiar to anyone? Or could this be something more benign, like a misconfiguration?