Kim, you are very bad!
I'd be running a good virus check at least..
If the bounces show that it never came from anywhere near your network, then other than having SPF records for your domain, there's nothing much you can do about it.Otherwise what Tewdric said.