Sending emails to bogus addresses??

[Iknowit101]

OK, we "were" having some Issues with our exchange 5.5 (SP 4) running on NT 4.0 (SP 6a) when looking to fix the reason why the Mail serve wasn't sending email I find out that on the IMS outgoing queue, there are some messages that users are sending email to bogus email addresses even when the user was on vacations for 2 weeks and the client PC has been turned off for that time, emails continued to get stuck in the queue because the address don't exist, I am assuming that this accounts are sending emails to "legitimates" addresses too.
My question is how do I stop this? This has to be set on the server since the client PC has been turned off for a while and emails continued going out from this users accounts.
I have patched the client PC, updated to SP2 (the one running XP, second one runs win98se) run spybot and ad- aware, virus scanned (Norton came out clean) but this still happening.
Any suggestions? This is bugging me.


It wasn't me, it was someone that looks a lot like me . . . .

 

[DestinysDream]

What I would do is set their email limit for "Send" below the current amount of email in their mailbox. That would stop it from sending to the queue. That would give you time to figure out what virus is on that machine. Open their Exchange mailbox and go to the "Limits" tab.

If anyone calls and says "I know a little something about computers" just tell them to reformat it.

 

[eod]

The person on vacation did they have out of office notifications setup? A lot of times (who am I kidding all the time) spammers use a false address, so it'll try and send the out of office notification to a fake address and just sit in the queue.

 

[Iknowit101]

Thanks for the reply guys, I will reduce their "send" capacity.
Norton AV did not find any virus on this boxes, in one of this cases the user had a Brand New computer with all updates and patches and NAV running and I keep seeing those emails on the queue, I mean if the computer is infected with a virus, one will think that getting rid of the computer will get rid of the virus, right? I guess i was wrong . . . or the virus are so fast to get in the PC that got there before NAV and all patches?
Damn, is there any solution to this issue?

eod: This persons did had their "Out of Office" turned On.

Thanks in advance.


It wasn't me, it was someone that looks a lot like me . . . .