RE: malware that creates Outlook rules

2010-08-04 Thread David Lum
m Admin Issues Subject: RE: malware that creates Outlook rules Take that paragraph out of contest and it scarcely looks like English... -Original Message- From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Tuesday, August 03, 2010 1:35 PM To: NT System Admin Issues Subject: RE: malw

RE: malware that creates Outlook rules

2010-08-03 Thread Brian Desmond
Issues Subject: RE: malware that creates Outlook rules That's awesome. I look forward to playing with it. -Original Message- From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Tuesday, August 03, 2010 3:35 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook

RE: malware that creates Outlook rules

2010-08-03 Thread Brian Desmond
id Lum [mailto:david@nwea.org] Sent: Tuesday, August 03, 2010 5:05 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules Take that paragraph out of contest and it scarcely looks like English... -Original Message- From: Brian Desmond [mailto:br...@briandesmon

RE: malware that creates Outlook rules

2010-08-03 Thread Brian Desmond
lto:crawfo...@evangel.edu] Sent: Tuesday, August 03, 2010 5:13 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules Good to know. Is it possible to host additional mailboxes locally just for voicemail/faxes and leave the actual mail in the cloud? Not really UM per se, but

RE: malware that creates Outlook rules

2010-08-03 Thread Webster
I didn't know we were having a contest! Webster > -Original Message- > From: David Lum [mailto:david@nwea.org] > Subject: RE: malware that creates Outlook rules > > Take that paragraph out of contest... ~ Finally, powerful endpoint security that ISN'T

RE: malware that creates Outlook rules

2010-08-03 Thread Crawford, Scott
That's awesome. I look forward to playing with it. -Original Message- From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Tuesday, August 03, 2010 3:35 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules Yep it's the same set of cmdlets y

RE: malware that creates Outlook rules

2010-08-03 Thread Crawford, Scott
sions. -Original Message- From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Tuesday, August 03, 2010 2:38 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules Currently UM in that scenario isn't possible. Thanks, Brian Desmond br...@briandesm

RE: malware that creates Outlook rules

2010-08-03 Thread Michael B. Smith
that creates Outlook rules Take that paragraph out of contest and it scarcely looks like English... -Original Message- From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Tuesday, August 03, 2010 1:35 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules Yep

RE: malware that creates Outlook rules

2010-08-03 Thread Crawford, Scott
.sms.symantec.com/lookup -Original Message- From: Osborne, Richard [mailto:richard.osbo...@wth.org] Sent: Tuesday, August 03, 2010 12:16 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules Actually this was happening all weekend. I was chasing my tail so hard I did

RE: malware that creates Outlook rules

2010-08-03 Thread David Lum
Take that paragraph out of contest and it scarcely looks like English... -Original Message- From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Tuesday, August 03, 2010 1:35 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules Yep it's the same s

RE: malware that creates Outlook rules

2010-08-03 Thread Brian Desmond
rian Desmond br...@briandesmond.com c   - 312.731.3132 -Original Message- From: Steven Peck [mailto:sep...@gmail.com] Sent: Tuesday, August 03, 2010 3:30 PM To: NT System Admin Issues Subject: Re: malware that creates Outlook rules Microsoft also has a similar program for EDUs for ho

Re: malware that creates Outlook rules

2010-08-03 Thread Steven Peck
om: Glen Johnson [mailto:gjohn...@vhcc.edu] > Sent: Tuesday, August 03, 2010 2:27 PM > To: NT System Admin Issues > Subject: RE: malware that creates Outlook rules > > I'm sure it is, and the Va. CC uses PeopleSoft for our Student Info > System(SIS) and so they worked tog

RE: malware that creates Outlook rules

2010-08-03 Thread Brian Desmond
ll this is done via the web. Maybe google would work with your SIS vendor to create something similar. -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Tuesday, August 03, 2010 12:08 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook

RE: malware that creates Outlook rules

2010-08-03 Thread Brian Desmond
haven't looked into it yet. -Original Message- From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Monday, August 02, 2010 3:14 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules Ah ha. Didn't notice the .edu addy. In that case, I would seriously inv

RE: malware that creates Outlook rules

2010-08-03 Thread Glen Johnson
Maybe google would work with your SIS vendor to create something similar. -Original Message- From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Tuesday, August 03, 2010 12:08 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules Hmm, interesting. I like tha

RE: malware that creates Outlook rules

2010-08-03 Thread Osborne, Richard
l...@aspca.org [mailto:richardmccl...@aspca.org] Sent: Monday, August 02, 2010 2:50 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules We're a Lotus Notes shop using Postini as a relay, if it makes any difference... We had one desktop system here, and a few in NYC, where sp

RE: malware that creates Outlook rules

2010-08-03 Thread Crawford, Scott
ystem Admin Issues Subject: RE: malware that creates Outlook rules Not sure on the UM questions. Not an issue here as we don't have student housing or provide phones for them. I'm betting that it is possible though. -Original Message- From: Crawford, Scott [mailto:crawfo...@ev

RE: malware that creates Outlook rules

2010-08-03 Thread Glen Johnson
ystem Admin Issues Subject: RE: malware that creates Outlook rules Not sure on the UM questions. Not an issue here as we don't have student housing or provide phones for them. I'm betting that it is possible though. -Original Message- From: Crawford, Scott [mailto:crawfo...@ev

RE: malware that creates Outlook rules

2010-08-03 Thread Glen Johnson
min Issues Subject: RE: malware that creates Outlook rules Yeah, it's on the investigate list. It does happen with staff on occasion too, but not nearly as much as students. The major outstanding question I have is how to do Unified Messaging with Exchange if the mailbox is outsourc

RE: malware that creates Outlook rules

2010-08-02 Thread Crawford, Scott
looked into it yet. -Original Message- From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Monday, August 02, 2010 3:14 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules Ah ha. Didn't notice the .edu addy. In that case, I would seriously investigate outso

Re: malware that creates Outlook rules

2010-08-02 Thread Kurt Buff
Ideas: Patch your machines - XP SP2 is no longer supported. Get to SP3, and get all the patches after that, including today's emergency patch. Patch your Wind2k3 server, too. Current is SP2, and you're not there, so you're *WAY* behind. Get UBCD4WIN, and boot any suspect machines with it and see

RE: malware that creates Outlook rules

2010-08-02 Thread Jason Reeves
We haven't had any of those problems since switching to opendns and Vipre for exchange. -Original Message- From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Monday, August 02, 2010 2:51 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules When this hap

RE: malware that creates Outlook rules

2010-08-02 Thread Glen Johnson
02, 2010 4:05 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules Yeah, that sounds nice except we have 2000 students with an average of 500 new ones every year so our major issue isn't repeat offenders. -Original Message- From: Glen Johnson [mailto:gjohn...

RE: malware that creates Outlook rules

2010-08-02 Thread Crawford, Scott
onday, August 02, 2010 3:40 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules I have been monitoring the Exchange queues. It's the only way I can tell when it is happening. I found the aqadmcli.exe utility and have been using it to clean the queues (aqadmcli &qu

RE: malware that creates Outlook rules

2010-08-02 Thread Crawford, Scott
lly a ThrottlePolicy of say 2 or 3 per minute, will be enough to let us catch it before we get blocked. -Original Message- From: Osborne, Richard [mailto:richard.osbo...@wth.org] Sent: Monday, August 02, 2010 2:40 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules I

RE: malware that creates Outlook rules

2010-08-02 Thread Glen Johnson
System Admin Issues Subject: RE: malware that creates Outlook rules I have been monitoring the Exchange queues. It's the only way I can tell when it is happening. I found the aqadmcli.exe utility and have been using it to clean the queues (aqadmcli "delmsg flags=SENDER,sender=bob.sm.

RE: malware that creates Outlook rules

2010-08-02 Thread RichardMcClary
n Johnson [mailto:gjohn...@vhcc.edu] > Sent: Monday, August 02, 2010 2:35 PM > To: NT System Admin Issues > Subject: RE: malware that creates Outlook rules > > Also check those exchange smtp queues. > If it is compromised accounts the spammers can send spam via you owa > faster t

RE: malware that creates Outlook rules

2010-08-02 Thread Osborne, Richard
ied. -Original Message- From: Osborne, Richard [mailto:richard.osbo...@wth.org] Sent: Monday, August 02, 2010 3:32 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules I'm glad I'm not the only sufferer! I'll try and answer the other questions

Re: malware that creates Outlook rules

2010-08-02 Thread Steven Peck
ilto:richard.osbo...@wth.org] > Sent: Monday, August 02, 2010 2:32 PM > To: NT System Admin Issues > Subject: RE: malware that creates Outlook rules > > I'm glad I'm not the only sufferer! > > I'll try and answer the other questions that were asked: > >

RE: malware that creates Outlook rules

2010-08-02 Thread Crawford, Scott
ill in the queues. -Original Message- From: Osborne, Richard [mailto:richard.osbo...@wth.org] Sent: Monday, August 02, 2010 2:32 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules I'm glad I'm not the only sufferer! I'll try and answer the other ques

RE: malware that creates Outlook rules

2010-08-02 Thread Glen Johnson
- From: Osborne, Richard [mailto:richard.osbo...@wth.org] Sent: Monday, August 02, 2010 3:32 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules I'm glad I'm not the only sufferer! I'll try and answer the other questions that were asked: 1) yes, the spam cont

RE: malware that creates Outlook rules

2010-08-02 Thread Osborne, Richard
ending out spam runs on a schedule? Currently I am getting up-to-date on patches on all my Exchange boxes. -Original Message- From: Thomas Mullins [mailto:tsmull...@wise.k12.va.us] Sent: Monday, August 02, 2010 2:17 PM To: NT System Admin Issues Subject: RE: malware that creates Outlook rules

RE: malware that creates Outlook rules

2010-08-02 Thread Glen Johnson
Check the sent items folder to see if the user replied to a phishing email. You might have 1000's of emails to go through to find but it might be there, unless they gave the user id and password to a web site. We've seen very similar things here. Massive spam in the sent folder but just before al

RE: malware that creates Outlook rules

2010-08-02 Thread Thomas Mullins
: 250 2.1.5 Ok In: RCPT TO: Out: 250 2.1.5 Ok In: RCPT TO: Out: 250 2.1.5 Ok Shane -Original Message- From: Roger Wright [mailto:rhw...@gmail.com] Sent: Monday, August 02, 2010 2:35 PM To: NT System Admin Issues Subject: Re: malware that creates Outlook rules Is your firewall set

Re: malware that creates Outlook rules

2010-08-02 Thread Roger Wright
r Wright [mailto:rhw...@gmail.com] > Sent: Monday, August 02, 2010 1:09 PM > To: NT System Admin Issues > Subject: Re: malware that creates Outlook rules > > Have you had the users change their passwords yet? > > > Die dulci fruere! > > Roger Wright > ___ >

Re: malware that creates Outlook rules

2010-08-02 Thread S Powell
n't help. > > > -Original Message- > From: Roger Wright [mailto:rhw...@gmail.com] > Sent: Monday, August 02, 2010 1:09 PM > To: NT System Admin Issues > Subject: Re: malware that creates Outlook rules > > Have you had the users change their passwords yet? > > > Die

RE: malware that creates Outlook rules

2010-08-02 Thread Osborne, Richard
I disabled their accounts and it didn't help. -Original Message- From: Roger Wright [mailto:rhw...@gmail.com] Sent: Monday, August 02, 2010 1:09 PM To: NT System Admin Issues Subject: Re: malware that creates Outlook rules Have you had the users change their passwords yet? Die

Re: malware that creates Outlook rules

2010-08-02 Thread Roger Wright
Have you had the users change their passwords yet? Die dulci fruere! Roger Wright ___ On Mon, Aug 2, 2010 at 1:46 PM, Osborne, Richard wrote: > Has anyone seen malware that creates an Outlook rule that moves all new > mail to Deleted Items and then sends out a bunch of spam?  I have a few >