Email virus - HELP!

[mondeoman]

Been infected by a bulk emailer, looks taiwanese in origin (its sending everything to [e-mail]), and I cant find anyting on the net to help with its removal. All client pcs are off, so its on the server.

Anyone got any ideas on how to find and kill it? I've got Symantec anti Virus corporate edition, automatically updating as far as I know

Cheers

[GreenV8S]

MajorGeeks have a good guide.

[BliarOut]

Temporarily shut down your SMTP services until you fix it. That will help prevent you getting blacklisted while you effect a cure. e-mail should just back up at your ISP for a short while.

[mondeoman]

I've stopped sending anything out, just means we're dead to the outside world. Bastards! and my out-box is filling up at a phenomenal rate.

It started ay 9:20 this morning....

[Big_M]

Not sure if this will help but we had a similar problem recently - are you runing MS Small Business Server 2003 by any chance?

It appears that there is a bug that causes multiple email messages due to the way the POP3 connector processes certain messages. Our server went into meltdown with 30,000 emails being sent and received!!!

There is an update available from Microsoft.

[mondeoman]

Finally got it - I think it was Lodear.
I ran as many Symantec fixes as I could find and the virus scan from their site and it seems to have stopped it. It was sending an email every 5 seconds, so I reckon I've manually deleted about 20,000 emails since it started.

Ah well, back to paying work now.