[EMPiRE]

One of our (windows) servers is currently sending out SPAM and I am not able to find what is causing it. It is not send thru one of the sites using a php/perl bug as I have disabled them and still it sends out SPAM...

I have been running NOD32 & Spybot S&D (after it got infected) and both did not find anything.

I have a feeling it something which hides itself thus finding it will be hard

Any suggestions how to get rid of this Worm/Zombie other than reinstalling the server (which would be best but would be a lot of work)