Sorry to respond to my own message. I know you guys hate that but I have
info I forgot to add.
We are running Exchange 5.5. Also the messages are not all being
duplicated. Most of the duplicated messages match the originals. At least 1
was duplicated 800 kb larger than the first one. There are no attachments.
Any ideas? The server is pegging 100% while it sorts through a zillion
backed up messages.
Management seems to believe that we have been hit by a virus but the lack of
attachments and known e-mail headers makes me disbelieve that. Their next
thought is McAfee Groupshield has problems. The only changes to that product
I have been able to drag out of the administrator for that machine is a .dat
update to 4.0.4174 Tuesday night.
I have an e-mail in to McAfee on this. Any help is appreciated. Thanks!

-----Original Message-----
From: Adkins, Matthew [mailto:MAdkinshcr-manorcare.com]
Sent: Thursday, December 06, 2001 11:38 AM
To: focus-mssecurityfocus.com
Subject: Possible exchange attack

Does anyone know of an issue with Microsoft Exchange server where the server
is slowed down significantly and some messages are sent out a second time an
hour or more after the original?

Running Exchange on NT 4 with MacAfee Groupshield 4.1.50 engine, 4.0.4174
dat file.

Thanks!

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]