2005-07-06
Virus Spam
props for roadrunner for trying to stop the deluge of virus messages which are clogging everyone's inbox.
No.. I'm not talking about the virus message itself, but the messages we get from
a) bounces
b) spam/virus filters saying we have a virus
they have a nifty thing which mails the recipient to tell them a virus-laden message had their name on it. I got it bounced back as the people had my from email still on it. Do you know how I know about it, the stupid thing is still sending me bounce messages (see below)
Can virus-checking gateways please get a clue and:
auto-delete anything with a virus, possibly only sending 1 email a week to the affected parties if you really really must
my email address is so 'famous' that I usually get hundreds of bounce messages a day. I can usually tell when a new worm is going through the net just by the sudden surge of bounce messages I recieve in my spam/delete box.
From: XXXXX@holsman.net Subject: Good day To: XXXXX@rochester.rr.com Message-id: <45sdr2$irfhiv@hrndva-mx-03.mgw.rr.com> MIME-version: 1.0 Content-type: multipart/mixed; boundary="----=_NextPart_000_0006_3449CEAB.97ACEB18" X-Priority: 3 X-MSMail-priority: Normal X-Virus-Scanned: Symantec AntiVirus Scan Engine X-Virus-Scan-Result: Repaired 32352 W32.Mytob.AG@mm Your message cannot be delivered to the following recipients: Recipient address: XXXXX%rochester.rr.com@ims-ms-daemon Original address: XXXX@rochester.rr.com Reason: Over quota Original-recipient: rfc822;XXXXX@rochester.rr.com Final-recipient: rfc822;XXXXX%rochester.rr.com@ims-ms-daemon Action: failed Status: 5.2.2 (Over quota) ---------- Forwarded message ---------- From: XXXXX@holsman.net To: XXXXX@rochester.rr.com Date: Wed, 06 Jul 2005 06:22:40 +0800 Subject: Good day ALERT!!! This e-mail in its original form contained one or more attached files that were infected with a virus or worm, or contained another type of security threat. The following attachments were infected and have been repaired: No attachments are in this category. The following attachments were deleted due to an inability to clean them: 1. document.zip/document.scr: W32.Mytob.AG@mm The Following attachments were not delivered due to inbound mail policy violations: No attachments are in this category. Road Runner does not contact the sender of the infected attachment(s) in the event that they were not actually sent from the indicated party. Please contact the sender directly to alert them of their issue with infected files if you wish to do so. For more information on Road Runner's virus filtering initiative, visit our Help & Member Services pages at http://help.rr.com, or the virus filtering information page directly at http://help.rr.com/faqs/e_mgsp.html. ------------ Original message text follows ------------ Here are your banks documents.