[SpamCop-List] Re: Virus spam - another one
Blammo
ric.gates at bigsleep.org
Thu Oct 7 00:55:17 EDT 2004
On 06 Oct 2004 D.Diaz entered spamcop and left
news:Xns957AAFCE04C7Cxnddmxn at 216.154.195.61:
>> Of course, without the original headers of the bounced mail, one can't
>> track the original IP........... Another problem of bouncing stuff
>> instead of dealing with it properly...........
>>
>>
>>
>
> Ehm... this one also is not a real bounce, but a virm propagation. The
> infected machine is 62.49.206.2
>
Yes, on a real bounce the Return-Path should be <>
Though some virus scanners will put an address in there when bouncing, but
then there wouldn't be any binary attachment.
--
| Ric
|
More information about the SpamCop-List
mailing list