I'm in big trouble.
One of my customers servers are infected with a spambot or similar.
First i ran CCleaner to clean up files and registry before scanning.
I've used the following programs fully updated without beeing able to remove the threat:
SpyBot - Search and Destroy
Ad-Aware - Free Edition
Spyware doctor - Registered version
Malware Bytes - Anti Spyware
BitDefender Online Scanner
Trend Housecall Online Scanner
Trend Micro - Server Security (running on server)
All Programs say that the computer is now clean.
Trend Micro RuBotted is running and gives the following messages:
"Detected DNS query of malicious domain"
And this message
"Detected mass mailer or spambot"
The Exchange server's Queues fills up with thousands of mail.
Attached is logs.