Virus Being Sent...with my forum's name on it!

[LanciaStratos]

I just got an email from my website which contained the following:

Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Thu, 24 Nov 2005 02:06:32 -0500
Received: from [85.103.165.144] (helo=gtplanet.net)
by server.gtplanet.net with esmtp (Exim 4.43)
id 1EfBBU-0002Xo-3n
for [email protected]; Thu, 24 Nov 2005 02:06:32 -0500
From: [email protected]
To: [email protected]
Subject: Members Support
Date: Thu, 24 Nov 2005 07:06:11 +0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0014_1ADB874C.D7D53874"
X-Priority: 3
X-MSMail-Priority: Normal
Dear user jgreer,


It has come to our attention that your Gtplanet User Profile ( x ) records are out
of date. For further details see the attached document.


Thank you for using Gtplanet!

The Gtplanet Support Team








+++ Attachment: No Virus (Clean)

+++ Gtplanet Antivirus - www.gtplanet.net

Now, I'm well aware that this is a virus, and the email did not originate from my server's IP. Nevertheless, is there anything that I can do to prevent this from happening?

[Steve Machol]

Not really much you can do about this. It's a common problem.

[LanciaStratos]

Well, how exactly does a virus like this work? How does it get my user's email addresses?

[Steve Machol]

Sorry, I don't know. Maybe there are some virus experts around that can answer this.

[purplesage]

I wish I knew myself. I've been getting them as support@ mydomain.com
[email protected] and [email protected]
Perhaps setting these address as your own accounts might help.
Im stumped.