The server I'm managing was hit by spam (I think targeted) through an Anonymous relay that was setup and has since been disabled.
The server has 12GB of RAM and there was about 238,000+ of spam emails in the queue; mail.que was 5GB and EdgeTransport.exe was using 9GB of memory and the server's memory usage was at 99%.
What I did was stop the service Microsoft Exchange Active Directory Topology Service, and then deleted the mail.que file.
I started all the Exchange services except Exchange Transport Service which starts and quits.
I searched online and found out I have to use
eseutil to repair the
pasettings.edb file (Dirty shutdown) but I don't know what log file to pass according to the documentation and answers I found online.
And keep in mind
mail.que was deleted from the directory.
Which log file do I need to pass to
eseutil.exe along with the EDB file?
I first had to repair
pasettings.edb and because I deleted
mail.que I had to recover the whole folder for the queue file to match the logs, restarted MSExchange Transport and everything was back to normal.