Windows server hit with a virus - mass emails being sent through exchange!

[Mark]

Very quick skim of this, open up your exchange manager.

Start
All programs
Microsoft Exchange
System Manager



Down the left hand side, expand your server view, and select queues under the relevant server. On the right side, you should see yours. On a server I was working on, It got to 80,000 emails within 3 minutes.

Now you're thinking, how can I stop this and remove these emails?

The qued emails are stored in:

C:\program files\exchsrvr\mailroot\vsi 1\queue

Delete everything in there.

I also suggest freezing the que, do this within server manager, just right click and select freeze. You can also pause the SMTP service through services.msc

You then better clean up your server.