>I have IMail 6.06 server running in Win 2000 Adv
>Server.  I have about 6 virtual host set up to send
>and receive email for 6 different domains.  I had been
>running this settings and environment just fine for
>about 1 year.  But, recently, the server's CPU often
>ran into 100% usage by some of the SMTP32.EXE process.
>  When I looked at "Windows Task Manager", the machine
>has like 19 of the SMTP32.EXE process running!

Having 19 SMTP32.EXE processes in memory isn't abnormal (it just means that 
IMail is trying to deliver 19 different E-mails at the same time, which 
often occurs when mailing list E-mail goes out).

>It is a virus?

Why do you think it is a virus?

Note that if one person has a virus and it is spreading, it will normally 
only use one or several SMTP processes (and won't use any more CPU time 
than normal E-mail with the same volume).  More likely, it could be someone 
sending spam.

>But I have updated my virus definition and
>did a scan for all hard drives.

Note that a standard virus scanner won't be able to detect viruses in 
E-mail, so that step won't be too useful (unless you think the server 
itself is infected, but that isn't likely).

>My machine is in critical condition now.  I need to fix this problem
>asap!

This may seem like a dumb question, but have you checked the IMail logs to 
see what all that outgoing mail is?

I'm assuming that when you say the CPU usage is at 100% and that there are 
19 SMTP processes, but the situation is critical, that this has been 
happening for a long time (and that you didn't just once see the CPU at 
100% with a lot of SMTP processes).  In that case, someone is sending a LOT 
of outgoing E-mail, probably spam (or a mail loop).  Your IMail log file 
will clue you in as to who is doing it and why.

                                                    -Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
IMail.  http://www.declude.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/

Reply via email to