[SC-Help] Re: Did I receive this bounce because...

[Glenn Daniels]

"John E. Malmberg"  wrote in message
>  "Glenn Daniels" <nobody at devnull.spamcop.net> writes:
> >
> > Looks like W32.Sober.O to me... Received similar
> > item this morning and did not report as misguided
> > bounce, but alerted sender to apparent viral propagation
> > of the new virm variant first detected 05/02/2005.
>
> I recommend reporting all mis-guided bouncers so that they understand how
much
> of a DDOS attack they are doing by not using SMTP rejects.
>
> If they do not get complaints to their abuse/postmaster addresses, they
will
> not know how much problems they are causing.
>
...
Yabbut, this bugger dresses itself up to look like a
misguided bounce while carrying a payload of addy's
lifted from the infected server in its front end,
payload virm packed in the tail end. You have never
seen a bounce from 40 different Inboxes have you?

This thing comes saying that it tried 40 times to be
delivered and failing delivery gets returned to you as
the allegedly forged Sender which elsewhere does not
appear in the hoaxed bounce.

See parse of specimen with virm code grossly truncated
from the heart of the matter:
http://www.spamcop.net/sc?id=z760494073z7037a6f183b13dd22b92e4025fa942fcz

Glenn