(no subject)

[bubosquared]

You! Yeah, all of you! Run a virus check, now! Someone who has me in their address book has been infected, because I'm getting bounce messages. You can find removal tools on the page I just linked.

Comments

[rsadelle]

If you read the very page you linked to, the bounce message is a fake (one of the ways the virus propogates), and the thing itself has either infected spammers or is capable of doing it's own making up of to: headers--I've gotten them to addresses such as helen@graphousa.net, which doesn't exist. It's also possible that it's pulling your address from the cache of someone who visited your site but doesn't actually know you. It also fakes the from: headers, so anything it sends claiming to be from your address will bounce to you. And if you've got catchall e-mail forwarding turned on, you'll be getting anything that comes to any address for your domains that isn't an actual one. (Check those to: headers; it may not be to your e-mail address.)

[Rant about the state of technology knowledge postponed for a later date.]

Re:

[bubosquared.livejournal.com]

I have catchall, but not on that e-mail address. I missed the part about the caches. I linked that page because it had the removal tools, but we're getting flooded with bounce messages at work, and I was told by IT that that meant someone with us in their address book was infected. (That'll teach me to trust those people.) Hadn't thought of the spammers, though.