Exchange creates tese queues as part of it's normal operaations. Goinf from memory here as I don't have it to hadn they are domains that Exchnage hasn't yet succesfully delivered to. The actual queues - or the visible signs of them - hang about for a bit after delivery. Check again in a few hours and they will have gone. It is of course possible that you have been compromised, but the queues in and of themselves don't indicate it. =20 -----Original Message----- From: Philip Walley [mailto:philip.walley@xxxxxxxxxxxxxx]=20 Sent: 04 March 2004 14:30 To: Thin (E-mail) Subject: [THIN] Exchange question I have an exchange 2003 server that someone has obviously compromised. I noticed in the msg queues that there were entries for domains that I didn't know anything about. My questions are how do I delete the msg queues and what can I do to prevent this from happening again?=20 Philip Walley Sr. Network Engineer Consultrix Technologies Memphis, TN.=20 (901) 383-1300=20 =20 ******************************************************** This weeks sponsor triCerat Inc. triCerat makes your job easier by offering essential applications to eliminate your printing, policy and profile, and your application management problems. http://www.triCerat.com ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm ******************************************************** This weeks sponsor triCerat Inc. triCerat makes your job easier by offering essential applications to eliminate your printing, policy and profile, and your application management problems. http://www.triCerat.com ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm