Our external email quit working, and we noticed that the SMTP Send Queue was at 180,000, and smtp receive queue was at 2,500. When viewing the gwia send folder these were all spam emails, and mainly from one staff member. When logging in as that user the items were not in sent items. Our SMTP relay is disabled except for photocopiers. How can we find where these emails came from? We think one of our clients must have a something on their staff laptop, or is it possible the groupwise server got a virus?