He said it was scanning outgoing messages, as in email messages.

First of all, get a firewall, so you can block the program's access to the internet...just disallow anything you don't recognise. Beware that it may try to pretend it's a legitimate program, so check carefully.