I have an issue with my Exchange 2003 server that I’m in a quandry about. I have a constant stream of outbound mail that is queued to be sent to URL’s that I’m certain we are not sending to. These are everything from Viagra to Japanese sites.
All the mail has a sender of postmaster@stonehillgroup.com. I suspect I am seeing only that mail that cannot be delivered and remains in the outbound queue. No telling how much is actually being sent.
I have scanned the server several times and found no evidence of virus or malware. I created an SPF record in my local domain but that has not stopped the problem.
I’m coming to the conclusion that I have a workstation inside the domain infected with some kind of malware that is generating these outbound e-mails. All of my workstations are scanned regualrly for virus with Symantec but we have no malware protection.
I’d appreciate any ideas the community can throw my way.
Thanks !!!
