We are on 2012. No SP1 yet. I had a user that was complaining that his email was not being sent out. It made it to his sent folder but never got to his customers.

I sent an internal email from his account to me to verify that was working and it was. I had sent a blank email with out a subject.

What I go was a complete spam letter from West Africa complete with logo and signature.

What was happening is all this emails since 11/11/2012 had this in it and was being considered spam and deleted by our out going spam filter.

Some how his signature was changed to the below and set to automatic so he never know this was happening.

My question is how could this have happened?

Any clues?

This is it:


Dear Friend:

I am Barrister Williams White. calling from Nigeria West Africa. I am Barrister Williams White, English speaking Beninoise, Solicitor and Financial Attorney/Consultant. I was moved to contact you based on the present condition of things here.

There is a foreigner who registered with my Legal firm as his personal Attorney and he was a stock broker as well as a one time secret agent in importing oil from overseas for our former Ministers. My client was also a Diamond/Gold Merchant.

So, on 2nd June 2001 my client, Mr. George, made a fixed deposit for US$46,500,000.00(Forty Six Million, Five Hundred Thousand US Dollars Only) with a Bank here in Nigeria, with standing statement/agreement with the bank that all correspondences in respect to the fixed deposit contract must be sent to him through my humble chambers. Upon maturity, the routine notification was sent to me, which I dispatched to his forwarding address as usual without a reply. After a month, I sent a reminder which I received from the bank without any reply again.

Finally, I discovered from my client's contract employee that he died among many others on Sept.11, 2001 Terrorist attack. He died without making any WILL and all attempts to trace his relatives were fruitless. I also discovered that he did not declare any kin or relations in all his official documents, including his fixed deposit contract with the bank. Hence I seek your consent to present you to this bank as the next of kin based on the official letter I just received from his bankers reminding me that BENINOISE LAW states that at the expiration of (12) years the money will be reverted to the ownership of the BENINOISE Government if I do not confirm the next of kin to claim the fund.

Consequently, my proposal is that I will like you as a foreigner to stand in as the next of kin to my deceased client so that the fruits of this old man's labor will not go into the hands of some corrupt government officials. Note that this transaction is simple and risk free because I will provide expert legal services that will guarantee the successful execution of this deal. If you are interested, please contact me as soon as possible through phone,

I shall provide you with more details and how we shall proceed with the claims. I expect you to observe utmost confidentiality and be rest assured that this transaction would be profitable for both of us. And if you are interested contact me through this my private E-mail Address; (barr_wwhite@superposta.com)

I wait for your urgent reply with your personal telephone number and your full data's, so that we can proceed with the proper documentation of the transfer to your favor through legal processes.

Thanks as I wait for your Honest reply.
Best Regards,

Hon. Barrister Williams White.
Private Email: (barr_williamswhite@yahoo.com.cn)