spyware

As first step you can use Spyware Removal software. I know there are a few reputable companies who produce these software. Some soft available even "online" or as freeware packages.
Here are some links:

http://www.spykiller.com/
http://www.lavasoft.de/
http://www.spycop.com/
http://www.trashsurfin.de/

And as long-term solution I can recommend packages like PestPatrol. It sits in memory and monitors all activity, installations, cookies, etc. Antiviruses can catch some "pests" as well, but not all of them, so, consider installing both packages: antivirus and spyware. Or install antivirus software and package like "Search&Destroy" or LavaSoft Ad-Aware, but then you have to tell users to run this software from time to time, or schedule scans.

Good luck,

Michael Shavrov
Security+, CCSP, CCNP, MCSE W2K, Sun SCSA, ...

get the software Ad-aware 6.0...can get it in kazaa...hehe

kill all the regedit and all the files stuck on the harddrive!!1

very powerful..

Well if you found one, you should be able to determine if it is on any other stations and look for other types of software while checking them all. Then you better change all the passwords. Might be easiest to use policy manager to force everyone to change their passwords on next login. I would investigate the internal culprit and make an example of him/her to deter future hackers.

Don't forget to run anti-virus scans on the servers just in case

I would recommend spybot over any other, it is quick powerful and free. Also (for regular or intranet enabled quick scans) try xcleaner.
www.spywareinfo.com is a fantastic site with full resources - fully recommend getting on the mail out as well!

http://www.safer-networking.org/ for spybot
and http://www.spywareinfo.com

the other programs suggested are good (especially ad-aware) but I really like the attitude of these two.
Also: a copy of "hijack-this" and help from the spywareinfo forums is 100 times better than any program!!

Pfft....

Spybot is the best, folks. And it's free.

go to google.com and do a search on "S&D" with quotes it should return as one of the 1st hits a package called SPYBOTSD follow links and download the freeware (go back and donate if it solves your issue) after download and install do the update button first to get latest 'DAT' file they call them 'includes' after updating run the check for problems I have had great luck with this package it is very good.

Absolutley Right!!!!!

Adaware 6 is an excellent download from lavasoft