Exchange 2003 SBS - Compromised???
Posted on 2012-03-22
Exchange 2003 SBS
Client sent me a screen shot this morning of the Queues and it looks like there is either a bug or the system has been compromised. I see lots of outbound messages in the Queue that are definitely spam (As in they are using this server to relay spam).
Could someone remind me how to properly turn on the correct logging so I can see what account is being used to send the messages.
Also any steps that I should make sure I take after I figure it out (other than change the password) would be helpful.