Inter-Office Spam emailing

[kamikazimunkey]

First, let me say that if I have posted this in the wrong forum, I apologize and will move it to the correct one once it has been pointed out.

I am the makeshift IT person for our small office of five people. We have five workstations, each running Windows XP, SP3, and one server that runs a terminal server within it. The server has Server 2008 R2. All workstations use AVG for antivirus and SuperAntiSpyware for Spyware removal. For awhile now, one user has been sending spam email out. However, the odd part about the problem is only to one other person. That other person is another employee here with the same domain. I have scoured the internet for a solution and scanned and scanned the two computers that are having the problem but can't come up with anything. The key symptom to me is that only one other person is getting the spam emails even though she has hundreds of people in her outlook contacts and that it is only going inter-office instead of outside the network.

Thanks for any help that can be given and if I have not given enough information, I would be glad to share any other knowledge I have.

 

[Bruceification73]

Wait, one of your employees it sending out the spam mail? Did I read that wrong? Please correct me if I'm wrong, because if I understand you correctly, it seems like telling them to stop or firing them would yield better results than scouring the internet.

In the event that I am wrong, I will suggest a couple things anyway. First of all, have you tried using Malwarebytes anti-malware (free) instead of SuperAnti-spyware, just in case? It may be worth a try. I too cannot find anything about spam being sent to only one person, not even on the other side of the internet where they show you how to make spam, so I have no idea what's up with that.

Anyway, if I'm wrong about the spam coming from one of the people on your network, please let me know who it is coming from or what type of spam it is or whatever. I hope someone else posts here because I really don't know what to do other than try Malwarebytes.

This could either be posted here or in the network section, so don't worry about that.

 

[kamikazimunkey]

Sorry, I was unclear on that part. She hasn't been purposely sending them out. Her computer is sending them out without her knowing.

I haven't tried Malware Bytes yet because I had heard that SAS finds more infections then Malware Bytes. However, I will try it this morning and see if it finds anything different.

You are correct that it is coming from someone on our network. We will call the person/workstation AML and the other person/workstation BJK. BJK and AML are both users/employees on our server. About every 20 minutes BJK gets an email that is trying sell her viagra/watches/russian brides from AML. AML is not sending these out and her outlook doesn't seem to be doing anything. BJK is the only one getting these emails. The other three users on the network don't get a thing from her. Also, no one outside of the network has gotten anything. BJK can't block AML because we use inter-office emails to communicate a lot.

I hope that clarifies things.