But since the subject that you are receiving is "undeliverable : RE: Details" isn't that his server is just returning the message Unless the virus has more subjects then the list of subjects that I am aware of.
Comparing it to the headers generated by the copies of Sobig.F we've looked at, it appears that it was indeed a bounce message.
However, the fact remains that there was a virus in the bounce message, so they were spreading the virus.
Fortunately, IMail won't do this. If an E-mail is sent to an address that doesn't exist, IMail will reject the E-mail. It would then be up to the remote mailserver to generate the bounce message.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.