Queue filling with outgoing spam, how do I stop it?

My queue has lately filled up with mail intended to go out as mail from [email protected] or [email protected], and the like.
I run Wordpress sites on this server and I updated all versions, fixed all folder permissions and changed all passwords. It stopped for a while after that, but it's back again.
I've checked all Wordpress logins and found no unauthorized IPs logging in. Can't find anything in the FTP or access logs that looks amiss.
I know we are not an open relay.
Can anybody tell me how I can track down how or where in the system these scumbags are getting in?
Really appreciate any help!
Scott

Forgot to show an image:

Similar Messages

At What Time are Device Queues Filled with Updates?

At What Time are Device Queues Filled with Updates?

As you can see from other postings on this forum, we're currently experiencing upload problems for very large files, especially over slower internet connections. I suggest that you try to upload these files to your account at https://cloud.acrobat.com and then create Public links from there. You can then distribute the Public links for your users to access the files.

TS1503 My iPhone 4 says that there is not enough memory to download apps like Facebook and Instagram. When plugged into iTunes it says that 4GB is filled with "other". How do I clear the "other"? What is this?

My iPhone 4 says that there is not enough memory to download apps like Facebook and Instagram. When plugged into iTunes it says that >4GB is filled with "other". How do I clear the "other"? What is this?

Other is usually around 1 GB...
A ' Large Other ' usually indicates Corrupt Data...
First Try a Restore from Backup... But... if the Large Other Persists, that is an Indicator of Corrupt Data in the Backup... Then a Restore as New is the way to go...
Details Here > http://support.apple.com/kb/HT1414
More Info about ‘Other’ in this Discussion
https://discussions.apple.com/message/19958116

I hear music and noise whenever I use anything to do with audio. How do I stop it?

I hear music and noise whenver I use anything to do with audio. How do I stop it????

-> [[Troubleshooting extensions and themes]]
Check and tell if its working.

Other programs messing with my Firefox; how do I stop?

When I first start up Firefox, I have noticed that two annoying things happen:
1) I get multiple copies of Firefox starting up. One will be the one I want, but I also get AOL starting up one and this morning I had two other copies opened up as well to other sites. I just want ONE copy of Firefox to start up when I start the program. How do I stop these extra copies opening?
2) Something has changed the default search tool to Bing instead of Google. I HATE Bing. How do I tell Firefox to go back to defaulting to Google in the search tool bar?

Start Firefox in [[Safe Mode]] to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > Appearance/Themes).
*Don't make any changes on the Safe mode start window.
*https://support.mozilla.com/kb/Safe+Mode
It is possible that there is a problem with the files sessionstore.js and sessionstore.bak in the Firefox Profile Folder.
Delete the sessionstore.js [2] file and possible sessionstore-##.js [3] files with a number and sessionstore.bak in the Firefox Profile Folder.
* Help > Troubleshooting Information > Profile Directory: Open Containing Folder
* http://kb.mozillazine.org/Profile_folder_-_Firefox
Deleting sessionstore.js will cause App Tabs and Tab Groups and open and closed (undo) tabs to get lost, so you will have to create them again (make a note or bookmark them).
See also:
* [1] http://kb.mozillazine.org/Session_Restore
* [2] http://kb.mozillazine.org/sessionstore.js
* [3] http://kb.mozillazine.org/Multiple_profile_files_created

Outgoing mail queue fills with spam

I remember reading about how to fix this before - but cannot find the details now.
I have a server that is trying to send mail to non existant domains or non existant e-mail addressed. the mail is not originating from clients.
Typical entry in the mail queue is
Message ID: 60D7987570
Date: Thu Aug 17 06:18:36
Size: 34446
Sender: MAILER-DAEMON
Recipient(s) & Status:
[email protected]:
host mail.cncnet.net[210.53.130.195] said: 450 4.1.1 <[email protected]>: Recipient address rejected: User unknown in local recipient table (in reply to RCPT TO command
how can I sent the mail server up to just ditch this stuff in the first place.
Tim

Here is an extract from the logs. I think I understand this now and it works as it should - but perhaps you could confirm.
This message is clearly not stuck in the outgoing queue. From what I can see mail is received from a backup mail relay for a non existent user on this server. When we try to reject it back to sender, if the sender rejects with 550 we bin it.
I guess the problem is what to do when the receiving mail server fails to respond? I think eventually it times out and we delete the message. Is that correct?
Aug 18 15:27:00 server postfix/cleanup[20819]: 9F7AAE92EB: message-id=<000001c6c2d2$2aae8940$d73fa8c0@hpcsece>
Aug 18 15:27:00 server postfix/qmgr[17315]: 9F7AAE92EB: from=<[email protected]>, size=3353, nrcpt=1 (queue active)
Aug 18 15:27:00 server postfix/smtpd[20816]: disconnect from scanner.datacenta.net[217.33.105.206]
Aug 18 15:27:16 server postfix/smtpd[20827]: connect from localhost[127.0.0.1]
Aug 18 15:27:16 server postfix/smtpd[20827]: B7FA3E930E: client=localhost[127.0.0.1]
Aug 18 15:27:16 server postfix/cleanup[20819]: B7FA3E930E: message-id=<000001c6c2d2$2aae8940$d73fa8c0@hpcsece>
Aug 18 15:27:16 server postfix/qmgr[17315]: B7FA3E930E: from=<[email protected]>, size=3905, nrcpt=1 (queue active)
Aug 18 15:27:16 server postfix/smtpd[20827]: disconnect from localhost[127.0.0.1]
Aug 18 15:27:17 server postfix/smtp[20820]: 9F7AAE92EB: to=<[email protected]>, relay=127.0.0.1[127.0.0.1], delay=18, status=sent (250 2.6.0 Ok, id=20277-06, from MTA: 250 Ok: queued as B7FA3E930E)
Aug 18 15:27:17 server postfix/qmgr[17315]: 9F7AAE92EB: removed
Aug 18 15:27:17 server postfix/lmtp[20828]: B7FA3E930E: to=<[email protected]>, relay=/var/imap/socket/lmtp[/var/imap/socket/lmtp], delay=1, status=bounced (host /var/imap/socket/lmtp[/var/imap/socket/lmtp] said: 550-Mailbox unknown. Either there is no mailbox associated with this 550-name or you do not have authorization to see it. 550 5.1.1 User unknown (in reply to RCPT TO command))
Aug 18 15:27:17 server postfix/cleanup[20819]: 38178E9310: message-id=<[email protected]>
Aug 18 15:27:17 server postfix/qmgr[17315]: 38178E9310: from=, size=6025, nrcpt=1 (queue active)
Aug 18 15:27:17 server postfix/qmgr[17315]: B7FA3E930E: removed
Aug 18 15:27:19 server postfix/smtp[20831]: 38178E9310: to=<[email protected]>, relay=bx1.techsolsc.com[65.5.144.18], delay=2, status=bounced (host bx1.techsolsc.com[65.5.144.18] said: 550 <[email protected]>: Recipient address rejected: Unknown user (in reply to RCPT TO command))
Aug 18 15:27:19 server postfix/qmgr[17315]: 38178E9310: removed

Mail queue filling with errors, is something broken?

Back in SL, I was able to just look at the queue in server app and if it ever had anything in it, I knew it was a problem and I usually could deal with it.
But in ML, you have to issue "mailq" in terminal to see it. So I did that a lot when first set up, and everything seemed fine.
I just checked it recently and found hundreds of messages like this:
0C8AA2B7E2D6
9315 Sun Jan 4 09:14:13 [email protected]
(host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=76490-02-4, quar+notif FAILED: temporarily unable to quarantine: 451 4.5.0 Local delivery(1) to /Library/Server/Mail/Data/scanner/virusmails failed: Mailbox file /Library/Server/Mail/Data/scanner/virusmails is executable, refuse to deliver at (eval 102) line 219., id=76490-02-4 at /Applications/Server.app/Contents/ServerRoot/usr/bin/amavisd line 15343. (in reply to end of DATA command))
[email protected]
I delete them and it fills up again.
Can anyone please tell me what's happening here and how to fix it?
Thank a bunch,
Scott

Here it is:
prepress:~ server2$ ls -dl /L*/Server/M*/D*/*/virus*
-rwxr-x--- 1 _amavisd _amavisd 548758857 Dec 18 10:42 /Library/Server/Mail/Data/scanner/virusmails
prepress:~ server2$
Thanks Linc!

Using Icloud with Outlook 2007 and windows 7, I cannot get my calendar to list the scheduled appointments as it used to do before I cloud. The to do bar just shows no upcoming appointments when my calendar is filled with them. How do I fix this

Since using ICloud with Office 2007 and Windows 7, the to-do-list will not show any appointments. If has the notation that no appointments are available? My calendar is full of appointments. How do I correct this?

I don't have a password on my phone. After attaching the phone to the Windows 7 computer, my DCIM folder is always empty. Here's the solution: While the phone is plugged in to the computer, pick it up and select the Photos application. A dialog box appears and asks if you trust this computer. Obviously, select the "Trust" option. Then the photos will download. If you have a password on your phone, I'm guessing you have to enter it before you open the photo application.

Verizon Spam, how do you stop it??

Over the last 4 months, i.e. from Nov 10, 2008 to date March 20, 2009 I have received over 500 adds about "Get Faster Internet Plus $75.00 Back" Just this moring I received 29 of these unwanted, unsolicited commercial e mails! Dose anyone know how to stop it?? I have called 1-800-483-7988 and 1-800-326-7937 and been on hold for over 45min and then when I tell the gyu/gal that answers what the problem is, been sent to dept after dept just to be told they can't help.. Do I have to file a federal complaint under the federal can spam act to get it stopped?? Dose anyone no how to stop Verizon E-Mail Spam????
{word filter avoidance} Verizon Customer.
Moment.
Message Edited by KaLin on 03-20-2009 11:38 AM

Try NoSleep or InsomniaX.
17" 2.2GHz i7 Quad-Core MacBook Pro  8G RAM  750G HD + OCZ Vertex 3 SSD Boot HD 
Got problems with your Apple iDevice-like iPhone, iPad or iPod touch? Try Troubleshooting 101

CBSpersist log automatically created and filling up drive. How do I stop sfc.exe from autorunning

I am working on a machine where the client complained that the drive kept filling up. Upon checking I realised that over 750GB was occupied with CBS logs. These logs are usually generated when SFC.exe (System File Checker) executes. However, they are being
created an average of 3 times a week and no one onsite is running SFC. The logs go back to 2012 so it appears that somehow SFC is autorunning..
I could not locate a scheduled task for it in Task Scheduler.
Is there a wasy to confirm that there is no schedule task other than again going through every single element.
Any ideas as to why it is happening and how to stop it will be greatly appreciated.
The machine is running Windows 7 Home Premium.

Hi,
Are we in a domain environment?
Did this issue occur on a special machine or with all the clients in the domain?
CBS is Component-Based Servicing, and CBS.log logged the information for CBS events. More information regarding CBS, please take a look at:
Understanding Component Based Servicing.
Could you please have a share with the recent log file before going further? There might be some issue keep logging in the log file. Upload it to skydrive if possible and post us the link here.
Best regards
Michael Shao
TechNet Community Support

I have several gmail ids that I deleted with gmail. How do I stop Firefox from showing them when I go to log into surviving gmail ids?

I have 5 or 6 Gmail account IDs. Several have been deleted via Gmail so no longer exist. However, every time I want to log into one of my remaining Gmail IDs, Firefox shows a list of every Gmail ID I've had in the past. How do I delete the ones I no longer use??
Related question: How do I export my bookmarks so that I can completely eliminate Firefox and start fresh with a new Firefox that hopefully doesn't remember all my Gmail IDs???

On the logins, you can try clearing the obsolete ones here:
orange Firefox button > Options > Security > "Saved Passwords"
''or''
Tools menu > Options > Security > "Saved Passwords"
On bookmarks, there are several methods to import. You can export to an HTML file and store that outside of the Mozilla folders (e.g., in your Documents folder) or you can copy the bookmark backups folder.
Before making changes, I recommend backing up your Firefox settings in case something goes wrong. See [https://support.mozilla.com/en-US/kb/Backing+up+your+information Backing up your information]. (You can copy your entire Firefox profile folder somewhere outside of the Mozilla folder.)
Then, see:
[https://support.mozilla.com/en-US/kb/Exporting%20bookmarks%20to%20an%20HTML%20file Exporting bookmarks to an HTML file | How to | Firefox Help]
[https://support.mozilla.com/en-US/kb/Lost%20Bookmarks#w_restoring-bookmark-backups Lost Bookmarks - Restoring Bookmark Backups]
Finally, rather than uninstall/reinstall, you could create a new Firefox profile. It will look as though you just installed Firefox, and then you can copy important settings to the new profile at your leisure.
To create a new (blank) profile: [https://support.mozilla.com/kb/Managing+profiles Managing profiles]
To move key settings to the new profile: [https://support.mozilla.com/en-US/kb/Recovering+important+data+from+an+old+profile Recovering important data from an old profile].
Hope this helps.

My macbook is extremely hot and the fan is worryingly loud, what is wrong with it and how do i stop this from happening?

For soem reason if I actually dare to use my macbook the fan kicks in and is so loud that I am unable to use skype or other voice programs without a headset because of its volume, also it gets very hot very fast, so hot that if I rest it on my knees it burns. I normally have it on a desk and the area is well ventialted. I have no print queues and rarely have more than two programs running at a time. Can anyone offer a suggestion of what is wrong and how I can fix this please? One of the main reasons I bought one in the first place was that they are so quiet when shown them in the apple store, but this is worryingly loud...

Thanks, it seems that it doesn't like to play games, which is a bit of a bummer as i bought this specifically because it was capable of doing that. To be fair, it is capable... I just need to get used to a sound like sitting by a washing machine on spin cycle... Wish they would make people aware of this in the Apple Store, its very misleading and not at all desireable.

When i turn on firefox i get taken to a new page that is spam how do I stop it

a second page pops up with spam every time I open Firefox.. what can I do to stop it. I've tried many different cleaning and virus programs to fix this but nothing seems to work can you help me?

Do a malware check with some malware scanning programs. 
You need to scan with all programs because each program detects different malware. 
Make sure that you update each program to get the latest version of their databases before doing a scan. 
* http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
* http://www.superantispyware.com/ - SuperAntispyware
* http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
* http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
* http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
See also:
* "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked

The reload button blinks continually with certain sites; how do I stop it?

Reload butto blinks continuously at certain sites. How do I make it stop without resetting Firefox?

[To Anyone Coming Here From a Google Search on the same issue: 
'''DO NOT RESET FIREFOX''' 
It is a stupid suggestion that will do nothing to fix your problem.]
steven1950, 
I've noticed this behaviour on the NY Times website (nytimes.com). Using the Ghostery addon, I've been able to narrow it down to a Javascript tracker from ''ScoreCard Research Beacon'', itself called from another script from ''Web Trends''. Blocking either Scorecard or Webtrends prevents the behaviour (at least on the NYTimes site.) That said, I don't know what the script is actually doing, nor why Firefox even has this "function".
You can stop it by using either NoScript or Ghostery.
In Ghostery, open blockable trackers (click on the Ghost icon), then click the slider icon next to "Scorecard Research Beacon". Reload the page with F5. Problem should be solved. (Actually you can block all ten NYT tracker scripts, they offer no functionality that you want.) [Edited by user, Ghostery just simplified their interface.]
Alternatively, if you are using the Ad Block Pro addon, select "Open Blockable Items", type "scorecard" in the search field. Then double click on http: //b.scorecardresearch. com/c2/3005403/cs.js to block it.
Note for Devs and Mods: This is not caused by addons. It is due to a Javascript. Please stop mindlessly advising people to reset firefox or disable addons, or similar thoughtless nonsense, you are just making things worse. This is not a Windows Helpdesk. Turning it off and turning it on again is not a useful suggestion.

When restoring a session with many tabs, how do I stop the tabs from reloading even when I am offline?

In version 4, when restoring a previous session with many tabs (about 80) in offline mode with no internet connection, the tabs will realise there is no connection and will not load. In version 5, the tabs will constantly try to reload no matter how long the internet connection is not active and as soon as I connect to the internet, all the tabs try to load and will cause huge RAM usage and I have to shut down the browser. I want version 5 to be like 3 and 4 and not try reload all the tabs once it has detected no connection.

Hello there, lalaysa.
The following Knowledge Base article offers up some great recommendations for unlinking your old phone number from your device:
iOS and OS X: Link your phone number and Apple ID for use with FaceTime and iMessage
http://support.apple.com/kb/HT5538
Unlink a phone number
To remove a phone number from an Apple ID, sign out of FaceTime and Messages on your iPhone:
Settings > Messages > Send & Receive. Tap your Apple ID, then tap Sign Out.
Settings > FaceTime. Tap your Apple ID, then tap Sign Out.
This should remove your phone number from other devices using the same Apple ID with FaceTime and Messages. If the phone number is still available on other devices after you sign out of FaceTime and iMessage on the iPhone, you may need to sign out of iMessage and FaceTime on all your devices, then sign in to FaceTime and Messages again on devices you want to use.
Note: If you no longer have access to the iPhone that is using the number you want to remove, reset your Apple ID password.
Thanks for reaching out to Apple Support Communities.
Cheers,
Pedro.

Queue filling with outgoing spam, how do I stop it?

Similar Messages

Maybe you are looking for