Block account sending phishing email?

I am seeing someone is using my server for sending out phishing emails. The emails have content from FB, linkedin etc. Please help. How can I secure my server ? How is the person able to send out emails ? The email sender appears as . [system] Also the clam scanner is down always. How can I force run it?