Outbound Spam - few users
Problem reported by David Short - June 19 at 8:27 AM
Submitted
Noticed 10,000 emails in the spool last week.  Two users were responsible it seemed.  Disabled both users and cleared the spool.  Whenever I enable either user, after changing the password, the user logs in to the web portal and the spam begins again.  Malware scans on PC show nothing.  Could this be something inside their mail store?
 

3 Replies

Reply to Thread
1
Linda Pagillo Replied
Hi David. Did you restart the SM service after changing their passwords? Sometimes the sessions from the spammers stay connected until you do so even though you have changed the passwords. Also, to prevent this from happening, check out our free program Declude and it's Hijack component. Here are a few KB articles about it...
 
 
Please let me know if you have any questions and I will be happy to help. Thanks!
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
David Short Replied
Thanks a ton Linda.  I have installed the declude and configured it to monitor and hopefully stop outbound spam.
 
I wasn't able to find the hijack component on their website but I will keep looking.
0
Linda Pagillo Replied
You're welcome David. The Hijack component is included in the install. If you go to your Declude directory, you will see a file called hijack.cfg.off. Rename it to hijack.cfg and that will turn it on. Be sure to open it and make sure that HIJNOTIFY and HIJADDR are both set to ON and that they are uncommented. Also be sure to edit the HijackNotify.eml so that the alerts get sent to an email address of your choice when mail is held. Also, please check out our Hijack manual so you can understand exactly how it works: http://mailsbestfriend.com/downloads/docs/Declude_Hijack_Manual.pdf Please let me know if you have any questions. Thanks!
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 

Reply to Thread