After the previous fixes failed to stop a repeat spam email generation script which someone slipped into the forums here, we decided it would be best to do a thorough scrub-down of the site, fresh installs of modules, new core, cleaned out the database by hand, the works. We're still debating on migrating the site to a new server instance, but this time we will give people more notice than we did for this.