Administrator account hijacked?
- From: "Torrey Lauer" <torrey no spam moderntravel no spam net>
- Date: Wed, 27 Feb 2008 11:11:00 -0600
Our ISP has been consistently blocking our e-mails by the time the afternoon
comes around. I ran a report last night, and see that over 12,000 e-mails
have been sent from the Administrator account in the past two weeks. Is
there a way to figure out 1) How someone has gained access to the server
and/or the Administrator e-mail account? 2) Is there a way to block the
Administrator account from sending e-mails to anyone outside of the local
network? 3) The server and workstations all have Trend Micro. If this is
caused from a virus or a trojan, wouldn't Trend Micro have picked this up?
This leads me to think that it's not a virus or a trojan, etc. So, then,
I'm at a loss as to how somone could have gained access to the Administrator
account. I have even changed the password two days ago, but we were blocked
again from our ISP yesterday afternoon. So, I'm not sure that whoever is
using our Administrator account is actually logging in to it.
Ideas?
Thanks.
Torrey Lauer
Modern Travel Services
.
- Follow-Ups:
- RE: Administrator account hijacked?
- From: Sean
- RE: Administrator account hijacked?
- Prev by Date: Re: Upgrade 2003 SBS standard to Premium #2
- Next by Date: Re: Few Questions from a newbie
- Previous by thread: Few Questions from a newbie
- Next by thread: RE: Administrator account hijacked?
- Index(es):
Relevant Pages
|
Loading