Administrator account hijacked?



Our ISP has been consistently blocking our e-mails by the time the afternoon
comes around. I ran a report last night, and see that over 12,000 e-mails
have been sent from the Administrator account in the past two weeks. Is
there a way to figure out 1) How someone has gained access to the server
and/or the Administrator e-mail account? 2) Is there a way to block the
Administrator account from sending e-mails to anyone outside of the local
network? 3) The server and workstations all have Trend Micro. If this is
caused from a virus or a trojan, wouldn't Trend Micro have picked this up?
This leads me to think that it's not a virus or a trojan, etc. So, then,
I'm at a loss as to how somone could have gained access to the Administrator
account. I have even changed the password two days ago, but we were blocked
again from our ISP yesterday afternoon. So, I'm not sure that whoever is
using our Administrator account is actually logging in to it.

Ideas?

Thanks.

Torrey Lauer
Modern Travel Services


.



Relevant Pages

  • Re: Administrator account hijacked?
    ... I logged in to OWA, and don't see any e-mails in the sent folder. ... see mail messages that are being received and sent through this account. ... Administrator account from sending e-mails to anyone outside of the local ...
    (microsoft.public.windows.server.sbs)
  • Problems with CBL List and MS Exchange 2003 in SBSServer 2003
    ... Our corporate e-mails are having problems staying off the CBL List and I am ... to send e-mails to a massive amount of companies. ... I have been through the logs and it seems that the Administrator Account has ...
    (microsoft.public.windows.server.sbs)
  • Re: cannot access OE mailbox
    ... > friend's e-mails were not getting to me. ... > ISP website and no longer getting to the Outlook Express ... affect the ability of your antivirus software to block infections. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Are SA Users ALL Idiots?
    ... > owned by ISPs that allow spam to continue. ... other user of your same ISP. ... you end up blocking all e-mails from almost all free ... I still use its Bayesian plug-in to historically ...
    (comp.os.linux.networking)
  • Re: Cant send e-mail when traveling...
    ... Nothing is missing, what you're seeing is the expected, normal result of trying to use the SMTP server owned by a different ISP than the one you're DIRECTLY connected to. ... I send and receive e-mails from my Outlook ...
    (microsoft.public.outlook.installation)

Loading