If it’s the ashDisp.exe process that seems to be sending out the emails it may be because there’s a rogue DLL loaded into its address space.
Please try doing the following: download Process Explorer from http://www.microsoft.com/technet/sysinternals/utilities/ProcessExplorer.mspx, simulate the problem (i.e. confirm the ashDisp.exe process is sending out emails), then run Process Explorer, scroll the process tree to ashDisp.exe, press Ctrl+L to display the lower pane, press Ctrl+D to have DLLs in the lower pane, and then click Ctrl+A to save the contents of the window to a text file. Then post the contents of that file (or attach it to your post).
This should give us a complete list of modules (DLLs) loaded into ashDisp.exe address space.
Thanks
Vlk