looking for a spammer/virii/malware .... on my system

[Chuck Swiger]

On Aug 15, 2011, at 10:05 AM, alexus wrote:
> what else can I do to find it on my system who's trying to connect to
> remote webmail.west.cox.net ?

Monitor your network for SMTP traffic:

  tcpdump -nA -s 0 port 25

If malware is sending out spam, you'll see it and can then use lsof or whatever to identify the specific user/process.

Regards,
-- 
-Chuck