If you're getting mail sent from unrelated accounts, and from disabled accounts, have you tried changing any admin passwords? Perhaps someone is getting in through the View Mail option.
If you're worried about the system being compromised, try looking at lastlog to see if any accounts that shouldn't have been logged in have been, or from a strange location. |