Since you are using Declude, start using Hijack NOW! That is for starters.
Review the logs to see where the IP is and block that IP.
John T
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Howard
Smith (N.O.R.A.D.)
Sent: Wednesday, February 07, 2007
I called Howard on this, but for everyone else's info, if you are seeing
this, look for ssm.exe to be a running process. I found this on an
Imail server that I administer for another company this morning. The
file was showing processing time in the task manager and showed up on
the Services list
Howard
What version of Declude?
Do you have Hijack?
If so turn it on.
Do your delcude logs show anything?
Are you scanning all outgoing mail as well?
If you are behind a firewall, ( you better be) shut down imail and check
the firewall logs for outgoing smtp traffic.
Perhaps even disallow
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Need hep - mail server sending out stock
reports email
Since you are using Declude, start using Hijack NOW! That is for starters.
Review the logs to see where the IP is and block that IP.
John T
-Original Message
: Wednesday, February 07, 2007 3:11 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Need hep - mail server sending out stock
reports email
I called Howard on this, but for everyone else's info, if you are seeing
this, look for ssm.exe to be a running process. I found
] [mailto:[EMAIL PROTECTED] On Behalf Of Justin
Moose
Sent: Wednesday, February 07, 2007 3:11 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Need hep - mail server sending out stock
reports email
I called Howard on this, but for everyone else's info, if you are seeing
this, look
)
Sent: Wednesday,
February 07, 2007
8:57 PM
To:
declude.junkmail@declude.com
Subject: RE:
[Declude.JunkMail]
Need hep - mail server sending out stock reports email
Going
aGoogling found that the Intel
LANDesk uses a file called ssm.exe and there are a couple of programs
listed
or comprise.
John T
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Justin Moose
Sent: Wednesday, February 07, 2007 3:11 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Need hep - mail server sending out
stock reports email
I called Howard