Exchange 2003 Server Spam ibeing sent but not an open relay

Hi,
I am having trouble with spam being sent through my Exchange 2003 Sp2 server. It is not an open relay.
But 2 users accounts were sending mail out.
From:   Shelly Stengel Sent:  Wed 10/15/2008 3:03 AM
To:    
Cc:    
Subject:   Your Email Address Attached to E-ticket Number: 56475600545188
Attachments:  
This what teh message look like. I have a bunch sitting in the mail queue.
We have a spam appliance and i thought about using smart relay but can't get that to work right
Any ideas on what to check or if anyoen else has seen issue like this
Thanks
Ryan

carrolluAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
scottbortisConnect With a Mentor Commented:
looks like you have a worm in your network.  Use a network stiffer to see who is passing the traffic .  The one that is sending information to your exchange server at the time set is probably your wormed computer.  Run AV/Spyware sweeps on it.
0
 
carrolluAuthor Commented:
So the system would have be on our network then to pass this to teh exchange server. i have 11GB log file. any good tools to parse this to find the IP maybe?
0
 
carrolluAuthor Commented:
i checked the affected users pc's nothing onthem they are clean
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.