Those postings of your spam, nothing there to work with -- need he HEADERS!!! to see if they are coming from same server? Same country? Same spammer with info in the headers could use to filter, etc.
If you want, why don't you export a lot of spam as msg, then zip them up or put them in a pst we can open and look at to what is common with them and might be able to setup some filters. You might not want to make your email address in the spam public -- so PM and I can give you personal email account to send them too, or put them in your dropbox and let me know the link via PM.
That spam software sc302 linked too is OLD as the hills! Here is current link
http://www.sonicwall....html#tab=trial
Seems they only sell that in packs of 5 for licensing?
I can not STRESS ENOUGH that your IT should be dealing with the spam at server level or before -- desktop filtering is not where it should be filtered, it needs to be filtered before it even gets to your exchange server! Spam filtering can be done on a shoestring budget for sure if need be.. Just fire up a box infront of your exchange server if need be and use say
http://spamassassin.apache.org/
Just filtering who can even talk to your server is a HUGE reduction is spam, some simple filtering based upon is the server sending your email even legit email server, does it have a PTR, is on listed as dynamic IP range, is it on a black list. What country is it in -- maybe there are some countries you can just block because you personally would never do business with them. There are FREE anti-spam lists you can have your IT guess subscribe too and help filter out if you should allow server to even talk to your exchange server.
Look at the headers of your spam, I would be large sums of money that most of it should of never been even allowed to talk to your server in the first place.
example -- from this lottery spam I won!!
Received: from smtp.epagri.sc.gov.br (smtp.epagri.sc.gov.br. [
200.18.9.19])
by mx.google.com with ESMTP id ez8si7674016vdb.128.2012.05.29.05.06.33;
Tue, 29 May 2012 05:08:35 -0700 (PDT)
Got to love what looks like a government server being an open relay!! Anyway that IP is on several blacklists -- and really should have been denied to even be talked too!! Google can not really use such methods, much different userbase then a company business address. So they need to be more giving on sending servers. Clearly it was marked as spam and in my spam folder - but a business does not even need to talk to such servers.
here is another spam in my gmail
Received: from f3ufo2lho0j ([
115.186.117.132]) by mx.google.com with ESMTP id o8si7651725igl.64.2012.05.28.07.03.16;
You know the pills that are suppose to make your junk bigger

Well look at then, again on a **** load of blacklists and their server should of never been allowed to even talk to email server.
You can play around with software on your machine -- but if spam has gotten to your mailbox then battle has already been lost if you ask me!! Your company had to pay for the bandwidth for it to get to your mailbox, they clearly are having to handle much more mail then they really need too - this requires more cpu horsepower, more bandwidth, more storage, etc. etc..
I would really suggest you have your IT look into putting a service in front of their mail server.. MS provides such services for example.
http://www.microsoft...r-exchange.aspx
They can do a Trial to see how it works out, and if cost is doable, but there are many services like this. Depending on the number of email addresses you have it can be very cheap!!