HAd a Customer with a problem like this.. except the Mail settings would be changed as well..
the upshot.. had Netsky.p and Agobot Removed these to suckers and setup a Smoothy box.

Netsky was...