How do I find the worm

You'll have to look at the email headers to see where the virus is really coming from. The first ip address at the bottom of the list is the actual sender of the virus. The From: address is always spoofed. The reason you're seeing undeliverable mail is that someone is spoofing your return address.

The email addresses are taken from an infected person's address book. You seem to be on that person's address list. I get a lot of these things...other people I work with haven't seen one. One guy I work with says he gets one every three minutes. That's just the luck of the draw. Since you're the admin, send out an email to everyone stating that there is a new virus out there and to make sure that they're running the latest virus definitions. And let them know Microsoft NEVER sends out updates via email, never open attachments from strangers, blah, blah, blah.

But to track the source you'll have to read the email headers. A good primer on doing this can be found at:

http://www.stopspam.org/email/headers/headers.html

One of the ones sent to me:
Mon, 22 Sep 2003 00:52:10 -0400 (EDT)
Received: from rorlvjer (ip216-179-78-128.cust.bestweb.net [216.179.78.128])
by carmine.bestweb.net (Postfix) with SMTP
id 5FDD129C1C; Mon, 22 Sep 2003 00:52:03 -0400 (EDT)

It was sent by 216.179.78.128 which is an ISP in New York (http://www.geektools.com/whois.php). I don't know anyone there and I don't know how they got my address (probably because they got my address from one of the mailing lists I belong to). I don't worry about these. But if you see that the virus originates from a host inside your network, then you have to find it and disinfect it before it spreads.

Hope this helps....
From: "MS Corporation Technical Assistance"
To: "MS Customer"
SUBJECT: Current Network Pack

Since you are the only one receiving the email I would say the source is outside the company, if it would have been inside all of the users would receive the mails since it would have spread to all.
The reason why are are receiving the emails are because as having the administrator email linked to you ,you are receiving the viruses, ndr and other notifications.
So you have to check the settings in the emailserver.
You can also enable the full log option (if the server is a ms exchange server) to log all email communications and you would be able to track down the source. (in exchange 5.5 for example , 2x click on internet mail service and enable the diagnostics logging).

regards

Leopold