We contacted the mail host GoDaddy and they said it has to be something on our machines.
I ran a bunch of cleanups and followed all the instructions listed here within.
Please find attached a ComboFix log.
thanks you for your help!
here is a header from a message:
Received: from [188.8.131.52] (HELO antivirus.nursat.net)
by mx.nursat.net (CommuniGate Pro SMTP 5.2.13)
with ESMTP id 291905287; Wed, 01 Dec 2010 13:24:04 +0600
X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on antivirus
X-Spam-Status: Yes, score=9.3 required=8.5 tests=BAYES_99,MANY_EXCLAMATIONS
* 8.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* 0.8 MANY_EXCLAMATIONS Subject has many exclamations
Received: from [184.108.40.206] ([220.127.116.11] verified)
by antivirus.nursat.net (CommuniGate Pro SMTP 5.1.2)
with ESMTP id 244776425; Wed, 01 Dec 2010 13:24:02 +0600
receiver=antivirus.nursat.net; client-ip=18.104.22.168; email@example.com
Received: from [22.214.171.124] by smtp.secureserver.net; Wed, 1 Dec 2010 07:16:39 +0000
Subject: [*****SPAM*****] =?koi8-r?B?8NLRzdnFIM3P08vP19PLycUgzs/NxdLBISD3IMvPxMUgNDk1IQ==?=
Date: Wed, 1 Dec 2010 07:16:39 +0000
X-Mailer: Microsoft Outlook Express 6.00.2900.2905
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2905
EDIT: Posts merged ~BP
Edited by Budapest, 05 December 2010 - 04:53 PM.