[ubuntu] Do I need maildrop?

[pittcaleb]

I have having a massive problem in that one of my Joomla web site appears to have an exploit. We are attempting to find it, but thus far have been unsuccessful.

In the absence of a solution to this problem, it appears that the mass spam being deposited by the system is being delivered by maildrop. All users on my server send their mail via SMTP. Do I need maildrop? Can i remove/disable it? if so, is this easy?

Second, in case someone reading wants to point me to someplace helpful - the exploit we're getting has a file, image.php, which is a mass emailing app, being deposited into a /web/template/rhuk_milkway which is then accessed and send out emails. I unfortunately deleted the backup copy we created of this file. I would delete it, it would reappear within an hour or two.

The last iterations had it reappearing in different directories, first /templates/different_one then /templates itself. Could it be as simple as a password compromise on an administrator account? Have been thinking it was much more malicious.

Any help greatly appreciated.

PittCaleb