well, you could check the running services... a running smtp service would be a dead give away, but I would expect a trojan to have it hidden.. try running pandasoftware.com's online active scanner, it should find even new trojans (they update the sig files at least once every day). it's pretty good, just make sure you uncheck the "send me the email news letter" crap so ya don't get on their ad list.