At 01:08 PM 2/11/2004 -0500, you wrote:
Also worth noting is that a lot of the MyDoom messages sent have malformed mail headers. So when something like MailScanner gets the message they don't hand off the proper attachment to the scanner and the scan falsely returns an "All Clean" message and the mail server passes it through. -M
This is due to admins setting their anti-virus/anti-spam engines to bounce virii and spam. By doing so, they mangle the original MIME content which defeats a lot of the anti-virus defs.
Another reason to never bounce mail!!! Don't do it!