Windows Forum

Ask something
Discussion Locked

spam on exchange

0 helpful
1 reply

by nateh 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi all,

Relative newbie to Exchange. SBS2003.

Just came into a situation where the client's Exchange has been hit with a virus. Not clear where it came from, but the queue has been inundated with junk going out. It did lead to the client getting blacklisted.

I made sure the relay is turned off and have been monitoring the server for any suspicious behaviour.

I turned on message tracking and now I can see the history of any spam flurry, but the problem is that I don't know which machine (they have about 50 PCs) it is coming from.

Is there a way to see the originating point of a message?

thanks

Nate

1 reply

by p.j.hutchison

No as some viruses use their own SMTP servers to send out spam.
Best thing to do is install AV software on all client PCS and do full scans.
If in a Domain, you can deploy the AV software as an MSI and auto-install them.

This discussion is closed to new replies.