> -----Original Message----- > From: Nick Rout [mailto:[EMAIL PROTECTED] > Sent: Tuesday, 25 May 2004 7:24 p.m. > To: [EMAIL PROTECTED] > Subject: Re: What's going on, if anything? " Returned mail: User unknown" > > Its commom these days for virii to grab addresses out of the victim's > address book and send mails to them. Whats more it uses another address > out of the address book as the sender address. > > That means that when the mail bounces, the bounce message comes to you. > > There are many variations, and by the time these addresses float around, > and are bounced all over the place its a mess. > > There also seems to be a trend for virii/spam to masquerade as bounce > messages. > > move them to the spam folder and run sa-learn. > >
Snip It is not only address books that are scanned for addresses but entire volumes. The latest worms just grab anything with an @ in it and spew forth with their own SMTP engines so you may not even know that you have one if you don't have AV on a win32 box. I heard Symantec is finally shipping Nav Corp with the notify sender option turned off now. That only took 3 years. Ciao, Dave
