Has anyone considered the possibility - remote as it might seem due to the likelihood of the proffered answers being correct - that the emails are originating from DB6's computer, created by a spambot?
A look through the firewall log (if an appropriate software firewall is operating) should reveal much.