our server as spam-server? [solved]

[kroos]

Since yesterday it seems that the X-Mailer: PHPMailer 5.2.1 of my website www.ehoogkamer.nl is used by others to send emails to non existing addresses and so be bounced to my email-address. It seems someone is spamming through VM- "recommend" link/form on this  website
What to do?

Content of header of bounce-emails to my emailadress (at the bottom you will find specs of my Joomla-Virtuemart-environment):
Return-Path: <kroos@dds.nl>
Received: from dunhill.localdomain (dunhill.dds.nl [85.17.251.133])
   by smtpgw.dds.nl (Postfix) with ESMTP id 2C19B81BA1
   for <1u21eckqf2r@hotmail.com>; Tue, 12 Aug 2014 07:34:51 +0200 (CEST)
Received: by dunhill.localdomain (Postfix, from userid 12061)
   id C66FB30007A; Tue, 12 Aug 2014 07:26:20 +0200 (CEST)
To: 1u21eckqf2r@hotmail.com
Subject: 1u21eckqf2r@hotmail.com recommend you : Basset
Date: Tue, 12 Aug 2014 07:26:20 +0200
From: Eline Hoogkamer website <kroos@dds.nl>
Reply-To: Eline Hoogkamer website <kroos@dds.nl>
Message-ID: <2f396de93acf6cde428885a7e717f725@ehoogkamer.nl>
X-Priority: 3
X-Mailer: PHPMailer 5.2.1 (http://code.google.com/a/apache-extras.org/p/phpmailer/)
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="utf-8"
X-Virus-Scanned: clamav-milter 0.98.4 at smtp.dds.nl
X-Virus-Status: Clean


System Information
Virtuemart version 2.0.22a
PHP Built On Linux visconti 2.6.32-5-686 #1 SMP Tue May 13 16:33:32 UTC 2014 i686
Database Version 5.5.28-log
Database Collation utf8_general_ci
PHP Version 5.3.3-7+squeeze19
Web Server Apache
WebServer to PHP Interface cgi-fcgi
Joomla! Version Joomla! 2.5.24 Stable [ Ember ] 25-July-2014 13:00 GMT
Joomla! Platform Version Joomla Platform 11.4.0 Stable [ Brian Kernighan ] 03-Jan-2012 00:00 GMT
User Agent Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36

[jenkinhill]

You are using an old and insecure version of VirtueMart.   http://forum.virtuemart.net/index.php?topic=118683.0

Updae to the latest 2.6.7 version and you can then use reCaptcha on the form. Test the update on a backup of your site first in case of template issues.

[kroos]

Thank you for your reply.
1)Concerning the PHP-version of my provider, 5.3.3-7+squeeze19, I am in troubles? (You're talking about minimum PHP version of 5.3.10). What can I do in that case?
2)If upgrade is possible were can I expect eventually problems in the upgraded environment?
3) Though I don't know how to create a running backup-version of my site I intend to upgrade the live-production-environment after I have made a backup by FTP and exporting the specific database tables. Is that OK? Or do you have a link for me that explains me how to make a running backup of a joomla site?

[GJC Web Design]

1. would be very concerned by any host that won't upgrade you to what is already a very old version -
with my host for example I can select any version from 5.2 ->5.6 from from cPanel

2. normally only in 3rd party templates and extensions

3. Akeeba backup is the usual and extremely simple way of cloning a live site for test purposes - it should be used in any case for security backups

[kroos]

OK,
thank you for your  suggestions. I close this case by now!
I've decided to build a new site and did it already (had plans already for a long time).
Kind Regards,
Karel Roos