Badmail folder keeps filling up

[Michael Mishler]

Windows 2000 server sp4, exchange 2000 sp3

My c:\program files\exchsrvr\mailroot\vsi 1\badmail folder keeps filling up
with TONS of files all on it's own. The hard drive just crunches so much
that nobody can access file resources on the hard drive.

This ceases promptly when I run "net stop smtpsvc" on a command prompt.

I don't have an open relay. I have all the latest virus defs and all the
critical updates.

I noticed that the queue in Exchange System Manager > Servers > Protocols >
SMTP > Default SMTP > Queue has tons of what looks to be spammers attempting
to send mail, but once again, I'm positive I don't have an open relay.

Can anyone shine light on this situation? It sure looks like a virus.

Thanks for any and all input.

~Michael

 

[SFB]

Windows 2000 server sp4, exchange 2000 sp3

My c:\program files\exchsrvr\mailroot\vsi 1\badmail folder keeps filling up
with TONS of files all on it's own. The hard drive just crunches so much
that nobody can access file resources on the hard drive.

This ceases promptly when I run "net stop smtpsvc" on a command prompt.

I don't have an open relay. I have all the latest virus defs and all the
critical updates.

I noticed that the queue in Exchange System Manager > Servers > Protocols

SMTP > Default SMTP > Queue has tons of what looks to be spammers attempting
to send mail, but once again, I'm positive I don't have an open relay.

Can anyone shine light on this situation? It sure looks like a virus.

http://www.microsoft.com/sbserver/community/sbs_faq.asp

 

[Michael Mishler]

Sorry. First off, it's not Small Biz and second, there's nothing about that
in the provided link. Thanks though.

Any other suggestions?

 

[Michael Mishler]

I think I figured it out. Even though my relay isn't open, I believe my
weak password was hacked and the spammer was able to authenticate to use my
smtp server.

Thanks