I'm not familiar with Merak specifically, but if spam is coming from specific accounts, the usernames and passwords for those accounts are probably compromised. Change the passwords and inform the user of the new password. Then see if the spam stops, or slows down at least.