How to find which script on my server is sending spam emails?

view story

http://serverfault.com – My server is sending the spam email and I am not able to find out which script is sending them. The emails were all from nobody@myhost so disabled from the cpanel that nobody should not be allowed to send emails Now at least they are not going out, I keep receiving them. This is mail I get: A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: [email protected] Mail sent by user nobody being discarded due to sender restrictions in WHM->Tweak Settings ------ This is a copy (HowTos)