troubleshooting Question

Domain computer infected - sending out spam using our mail server

Avatar of raket
raket asked on
ExchangeSecurityOS Security
13 Comments1 Solution2515 ViewsLast Modified:
We suspect a computer in our Windows 2003 domain to be infected by a worm, and sending out spam using our Exchange mail server.

Because of this, our mail server's IP is being listed on the spam lists.
But, since everyone in our company uses the domain mail server, also most of our normal e-mail is blocked.

Instead of going to every single computer in our company (about 50 computers),
is there a way on the Exchange mail server to see which computer in our domain is sending an unusual amount of e-mails?

Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 13 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 13 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros