Potential Malware Threat

I have been advised by my web host that my site that runs on a dedicated server is sending out spam.

I have logged into the Plesk panel and run a malware scan and its showing the following as a venerability

/sytist/sy-inc/PHPmailer/class.phpmailer.php

RCE : CVE-2016-10045, CVE-2016-10031

Has this been seen elsewhere ??

Edited by

The PHPMailer version is 5.2.8. That exploit is for versions 5.2.2 and earlier.

Are you able to tell what script is sending out the spam?

Edited by

Hi Tim,
Unfortunately not, the hosting company just reported that my site on the dedicated server had been reported to RBL auditors - The scan only showed the info above

here's a copy of the email I received

In our routine investigation, we have found that your server IP has been listed in 2 RBL auditors.

The reason your server IP is been listed is because

5.NN.NN.NNN is infected with malware and is emitting spam.
5.NN.NN.NNN is making SMTP connections with HELO values that indicate a problem. The HELOs that it is connecting with are as follows:

Edited by

I think you are going to have to get more information like copy of the emails sent (could actually be legit) and the script sending them.

Edited by