[SpamCop-List] Re: Body-less spam

[Tom]

On Tue, 20 Jan 2004 12:11:27 +0000 (UTC), "D.Diaz"
<gospamming at yourdomain.invalid> wrote:

>Stephen Satchell <spamfilter at satchell.net> wrote in 
>news:pan.2004.01.20.04.50.50.441107 at satchell.net:
>
>[snip]
>> 
>> I've noticed the same thing, and decided to do a little investigation. 
>> Now, I haven't had enough of the things to put together a curve, but one
>> thing I notice right away was the truncation length:
>> 
>> 1480 bytes.
>> 
>> Suggest anything to you?  Like a broken PPPOE implementation?
>> 
>
>Hmmm... maybe.  But I have also received many messages truncated at less 
>than 1000 bytes.  
>I was wondering if all this could be the result of spamware dropping 
>tarpitted connections.

Sorry for quoting the entire discussion, but the one thing not
mentioned here (and I haven't investigated enough of these to tell) is
that this mailing may be the result of a broken trojan/virus. I've
seen a steady increase in the number of these over the past few
days... suggesting that the virus is spreading slowly (as reported by
eweek on a new one that appeared about two weeks ago)...