X-Authentication-Warning: delorie.com: mailnull set sender to djgpp-bounces using -f
From: Charles Sandmann <sandmann AT clio DOT rice DOT edu>
Newsgroups: comp.os.msdos.djgpp
Subject: Re: There is a  Virus in your system !!
Date: Thu, 16 May 2002 22:55:19 CDT
Organization: Rice University, Houston TX
Lines: 12
Message-ID: <3ce47f27.sandmann@clio.rice.edu>
References: <Xns9210CC7A47088neo1061hotmailcom AT 216 DOT 254 DOT 136 DOT 26> <200205170008 DOT g4H08ih12716 AT envy DOT delorie DOT com> <Xns9210E3EE35B18neo1061hotmailcom AT 216 DOT 254 DOT 136 DOT 26> <200205170245 DOT g4H2jtD00409 AT envy DOT delorie DOT com>
NNTP-Posting-Host: clio.rice.edu
X-Trace: joe.rice.edu 1021607976 5425 128.42.105.3 (17 May 2002 03:59:36 GMT)
X-Complaints-To: abuse AT rice DOT edu
NNTP-Posting-Date: 17 May 2002 03:59:36 GMT
X-NewsEditor: ED-1.5.9
To: djgpp AT delorie DOT com
DJ-Gateway: from newsgroup comp.os.msdos.djgpp
Reply-To: djgpp AT delorie DOT com

> > This wasn't a bounce (e.g. mailer_daemon, blah blah, user unknown...), it 
> > was a message from someone trying to tell someone else they had a virus...
> 
> It was automatic, so it's a type of bounce.  I don't think a real
> person would be so naive as to send such a message to a whole mailing
> list, especially since none of the list mail is "from" the list.

Many mail servers contain scanners that block viruses and reply back to
the sender.  When the sender is fake, you get the reply.  Due to the
current virus outbreak, and my email address in lots of documentation,
I've gotten several thousand of the viruses and several hundred of the
virus notifications from users and email gateways.