• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 827
  • Last Modified:

Exchange queue keeps growing - SPAM issue

Hi Experts,

need your help. Yesterday we are being hit by spam; it seems coming from internal because the firewall showing me it's coming from internal IP address to external IP add.

Now the problem is the ESM showing huge numbers of connectors with 1 - 100 messages per connector. Up until now we have 55K messages in connector. I have meade a temp connector with a fake IP address so that I can redirect all the messages in 1 connector and delete them from there. But again the messages keeps growing like crazy.

I've scanned the machine with Our AV and find nothing.

Also I've keep deleting those messages with aqadmcli to delete all messages automatically; but the speed of the messages and deleting message are almost the same. I've disabled the outbound email and put the box out of the network.

Please advise..... really need a solution and help.

Currently my emails running on a backup link and thanks God, all of my stores are also on a different box.


1 Solution
Delete the temp tables.
Unless the messages are going to your own domain, then if it was a machine infected inside your network then the messages would not appear in the Exchange queues.

These two blog postings will explain why that is not the case.

ESM is notorious for being unable to show the true extent of the queues after the server has been abused, so even after disconnecting the server from the internet, messages will continue to appear in the queues. That is simply while Exchange processes the messages. When a spammer has been able to compromise a server they will send 1000s of messages through it.

My spam cleanup article will help you find out how the server was compromised and clean up the mess: http://www.amset.info/exchange/spam-cleanup.asp

DAHITSydneyAuthor Commented:
Problem solved; it's a virus on the machine. using sysclean from trend micro.

thanks all.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Microsoft Windows 7 Basic

This introductory course to Windows 7 environment will teach you about working with the Windows operating system. You will learn about basic functions including start menu; the desktop; managing files, folders, and libraries.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now