i think I have a virus....

[pabc]

I've noticed a lot of disk thrashing recently that I never had so a check of the forums suggested iotop would identify the the culprit -

it did.

Sendmail if running 2-3 times a second;

sendmail: MTA: ./q############ from queue

I'm assuming my box is compromised and I'm spewing spam.

rkhunter / chkhunter suggest nothing obvious.

How can I confirm what infection I have?

Phil

[quentinl]

i used ClamTK and that just checks that would be a place to start

[westie457]

Change the Email password, and log out of the email account. See if that stops it.

[pabc]

hmm,

looking at the files in the /var/spool/mqueue they are all local - not spam.

'MOperating system error' - being spewed out about 30 a minute.

time for more investigating

[pabc]

Solved.

a regular cron job was creating significant errors and emailing them. Output is now suppressed and the problem has gone away