Help! I’ve been spoofed.

I have a couple of users on my LAN that are getting Virus replies from people they’ve never heard from. I believe they were spoofed. What kind of threat does this pose to my LAN? What can I do about this in general?