Spam from user: qmails

[zeroborg]

Hi all,

i have a spammer on my linux (suse 9.3 + PLESK 8.3), and as i can see from my logs he uses the user: qmails to spam.
=======================
Feb 25 13:49:13 ns qmail: 1203940153.094640 new msg 509
Feb 25 13:49:13 ns qmail: 1203940153.094718 info msg 509: bytes 4094 from <#@[]> qp 1858 uid 2522
=======================
The uid 2522 at my /etc/passwd file is qmails.
Does anyone knows a solution about this?
Thank you in advance,

Zero.

 

[atomicturtle]

Ive got a basic forensic procedure that might help you here:

http://www.atomicorp.com/wiki/index.php/Spam