Internet Mail Inbound Queue full

2002-07-15 Thread Bill Grocott

Hi all,

In my Internet Mail Inbound queue, I have a whole ton of 0 byte messages.
It won't let me delete any of them.

Anybody have a way to clear out the queue?

Thanks,

Bill Grocott
System Administrator
ND Graphic Products Limited

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: JDBGMGR.EXE Hoax?

2002-05-22 Thread Bill Grocott

Hoax.  Don't do what some of my employees did.  When I told them to ignore
the message, they assumed that I wanted them to ignore my message and follow
the instructions to delete the file.

Bill

-Original Message-
From: Bob Razler [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 22, 2002 12:27 PM
To: Exchange Discussions
Subject: JDBGMGR.EXE Hoax?


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello:

I have received several emails from people saying they are
getting a
notice that they have a virus (mail from someone who thinks they are
infected) telling them to delete jdbgmgr.exe (which has a teddy bear
icon).  This looks too much like one of those hoaxes where someone
tries to get users to delete a needed file.  Any experience with this
today?

Robert J. Razler, Esq.
Approvals Manager
Heritage Building Group, Inc.
Suite A-100
3326 Old York Road
Furlong, PA 18925
215.794.0550, ext. 1117
www.heritagebuildinggroup.com
[EMAIL PROTECTED]
PGP Public Keys available at:
http://www.razler.com/PGPKey.htm

- -Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Andrey
Fyodorov
Sent: Wednesday, May 22, 2002 12:16 PM
To: Exchange Discussions
Subject: Win2K DNS is PISSING ME OFF

Hi all.

I have two Win2K AD DNS servers. Recently they have been acting up:
all of a
sudden one of them stops using root hints and can't resolve a lot of
good
domain names (request timed-out). I restart the DNS server service
and
everything is OK again. Then 10-15 minutes later, it starts giving
request
timed-out. Both DNS servers experience this at different times.

Has anyone here seen this?

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 6.5.8 for non-commercial use http://www.pgp.com

iQA/AwUBPOvGqWwjiy2yaukAEQJpOQCeM/695zjSoC5wQTlVSQLM9nyImykAoPdZ
nXeOXC2wwqmt73DDSrE4lzgt
=2CS5
-END PGP SIGNATURE-


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: Nimda

2001-09-20 Thread Bill Grocott

Also www.hotel.com and their new site www.hotelbids.com

Bill

-Original Message-
From: John Matteson [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 4:05 PM
To: Exchange Discussions
Subject: RE: Nimda


Yep:

MCS.K12.NY.US

They are infected, as of Tuesday. They may have cleaned up their act by now,
though.

John Matteson; Exchange Manager
Geac Corporate Infrastructure Systems and Standards
(404) 239 - 2981

...the words that I remember from my childhood still are true, that there
are none so blind as those who will not see
--The Moody Blues (I know you're out there)


-Original Message-
From: Huot, Denyse [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 2:08 PM
To: Exchange Discussions
Subject: RE: Nimda


Does anyone know of an infected site?  I need it for testing purposes.

Thanks,

Denyse

-Original Message-
From: Mike Omilian [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 2:06 PM
To: Exchange Discussions
Subject: Re: Nimda

I got nailed too.  Not from an e-mail - I currently block all exe's.  We
must have gotten it from an infected web page.  I already applied the
patch for Code Red last month but my problem is a little bigger:

I can't log onto the server without getting a Dr Watson error for
explorer.exe.  The server runs ok, but after I log on and the desktop
comes up it generates the error.  I can't even got on long enough to run
anything.  I did get the patch applied for the Transversal vulnerability,
but I'm not sure if that helped.  Now our network seems to be slowing down
and people are having printing troubles too.  Some people can't get their
Outlook open - not enough system resources. . .   We're all up to date
with Virus software for Nimda, but the .eml files are still being created
- but not on every machine.  Wierd.  How do you find the machine that's
affecting the rest of the network?  What virus software is everyone using
for their NT servers (not for Exchange, but NT)?  Any help would be
GREATLY appreciated.

Mike

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: New Worm on the loose

2001-08-27 Thread Bill Grocott

Turn off your javascript and you can load the page.  It'll download a .JS
file and try to screw you around.. My cache is reporting a file is infected
with a virus, but it hasn't been run by any programs.  No harm done. 

8/27/01 4:54 PM Deleted MYPROXYSERVER\PROXYACCOUNT
X:\urlcache\dir2\http!``pccontrol.tripod.com`pcControl`interface.js
VBS/Generic@MM

That's what my log says.

Have fun!

Bill



-Original Message-
From: Roger Seielstad [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 27, 2001 4:46 PM
To: Exchange Discussions
Subject: New Worm on the loose
Importance: High


Sorry about the cross posting.

We don't have a lot of specifics on it, but there appears to be a new worm
on the loose. The payload is a typical Melissa-style worm, where its only
action is to send mail to all members of the GAL, with the following
message:
Hi, how are you ? I am fine here. Please read the page
http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack
you. Forword this mail to help all your friends too.

Its plain text, and carries no executables with it, but I haven't visited
the website yet. More info to follow, but there is zero information on the
web about it at this point.

Roger
--
Roger D. Seielstad - MCSE MCT
Senior Systems Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]