Someone is sending phishing emails from my server. I can not find out who that is because he is sending the emails as "nobody". How do I find out who is sending these emails ? And how can I switch off Exim ? I tried service exim stop and I switched it off in WHM but it always seems to restart itself
