Today the server is sending al lots of spam:

Code:
Feb  7 04:52:33 mail amavis[7678]: (07678-01-19) Checking: uzaQQkfPSLGD <root@mail.XXXX.XX> -> <gaber31678@hotmail.com>
Feb  7 04:52:33 mail amavis[9221]: (09221-01-5) Checking: zXz9Rqmrx3hj <root@mail.XXXX.XX> -> <mean-man@hotmail.com>
Feb  7 04:52:33 mail postfix/qmgr[15358]: B9E1E944548: from=<root@mail.XXXX.XX>, size=110361, nrcpt=1 (queue active)
Feb  7 04:52:34 mail postfix/qmgr[15358]: E1877944497: from=<root@mail.XXXX.XX>, size=110363, nrcpt=1 (queue active)
Feb  7 04:52:34 mail postfix/qmgr[15358]: 4BC321C4417E: from=<root@mail.XXXX.XX>, size=110820, nrcpt=1 (queue active)
Feb  7 04:52:34 mail amavis[6936]: (06936-01-29) FWD via SMTP: <root@mail.XXXX.XX> -> <j.horton@hotmail.com>,BODY=7BIT 250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 4315C1C4404F
I changed the root password, checked the system with rkhunter and chkrootkit but no result.

I tested with mxtoolbox if openrelay and is closed.

If something open on Postfix?

What i can do to block sending from root user?