|
Posted by Frank Saunders MS-MVP IE,OE/WM on October 20, 2007, 9:58 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> Hi,
> We did get a call from our ISp, that a lot of e-mails are being sent from
> our location. Then I di take a look at the C:\Program
> Files\Exchsrvr\Mailroot\vsi 1\Queue and C:\Program
> Files\Exchsrvr\Mailroot\vsi 1\UceArchive and I do see a lot of e-mails
> inside, if I do try to delete them, from the queue folder I can not. I
> ran
> Innoculate with the latest signature, and it saus no problem
>
> Please advise as the ISp is going to shut down our service.
Do a thorough check for malware, following all of the steps at one of these
Web pages.
Help with malware:
All MS-MVP Sites.
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/darnit.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/kb/827315
So How Did I Get Infected Anyway?
For quite a few people it's by installing programs like Messenger Plus,
whose ads for malware don't identify the malware as such and try to convince
you that you owe it to the author. See also:
http://www.wilderssecurity.com/showthread.php?t=27971
Don't ever do a "default" install of anything. Always choose Custom and see
what else is being carried along. Don't install any extras you're not sure
of.
--
Frank Saunders MS-MVP IE,OE/WM
www.fjsmjs.com
Do not send email
| 
XML site map