Spoofed emails on exchange 2003

Jason Millsapps
Jason Millsapps used Ask the Experts™
on
We are using Exchange 2003. I have 1 user who seems to have had his email address spoofed and has gotten several thousand returned emails in the past 2 days on his exchange account. After several malware/virus scans, I am certain that there are no viruses on his pc.
 My question is this: is it normal for those sent items to show up in his "sent items" folder in exchange also? This happens even if his pc is shut down.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
2nd Line Engineer
Commented:
it could be that his email account has been compromised. you need to change the password for his account straight away and that should stop provided if the emails were generated by the server. check for queue on exchange

if you cannot see anything on the server, it is the workstation then. in that case, change the password on the PC itself and use the new email password.

see how it goes.
Jason MillsappsNetwork Administrator

Author

Commented:
Will do, thanks.
Jason MillsappsNetwork Administrator

Author

Commented:
After all passwords changed, user still getting many underliverable emails.
Alan HardistyCo-Owner
Top Expert 2011
Commented:
You could be suffering from NDR spam.  Someone has gotten hold of your users address and is sending out emails pretending to come from your user, but because they are being rejected, the messages bounce back to your user.

What is odd is that messages are appearing in the Sent Items - which would indicate a problem on the PC.

Are you still seeing Sent Items that your user didn't send?
Jason MillsappsNetwork Administrator

Author

Commented:
The issue finally went away after changing the password. The only thing that I still cant figure out is why some of the outgoing emails were in the sent items folder. I scanned the pc with several pieces of software and none found any malware/viruses. Anyway, all is well now and thanks for the assistance.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial