Bryanhickman7777

Thank you, will try this tomorrow and publish the results.

I forgot to mention, one of the servers is a terminal server, that hosts remote sessions. Is this a problem?

The norton power tool was ran on the exchanger server, then auto restart. It's nat I'm afraid, but luckily there's only about ten machines including the servers.

Hello friend, I read that, but I'm not 100% convinced our network is infected. But if it is, is this process going on automatically without anybody's knowledge? Or does it require human interaction?

Our exchange email server has had its IP address blocked for the second time by anti spamware companies. Originally we changed our web provider to exanetworks from BT. They gave us a new ip and the problems began. We assumed that they gave us an IP that had been previously used by some kind of spamware company, hence the reason for it being blocked. A quick phone call and new IP later we have been fine for 4 months. Now the same problem is occurring again. Here is the exact error message. DB3FFO11FD060.mail.protection.outlook.com rejected your message to the following e-mail addresses: deleted by poster DB3FFO11FD060.mail.protection.outlook.com gave this error: Service unavailable; Client host [deleted by poster] blocked using Spamhaus; To request removal from this list seeBlocklist Removal Center - The Spamhaus Project Your message wasn't delivered due to a permission or security issue. It may have been rejected by a moderator, the address may only accept e-mail from certain senders, or another restriction may be preventing delivery. Diagnostic information for administrators: Generating server: deleted by poster DB3FFO11FD060.mail.protection.outlook.com #550 5.7.1 Service unavailable; Client host [194.247.236.188] blocked using Spamhaus; To request removal from this list see http://www.spamhaus.org/lookup.lassAt the minute it appears to have only been restricted to microsoft emails (hotmail), but i do not want to go through the head ache of changing ip address again. I can only assume that one of the exchange accounts is receiving alot of spam, or sending spam. Has anyone else had this issue? Any advice is appreciated.