This afternoon (EDT), I've been inundated with some list owner- and
-request spoofed addressed viruses (actually 32.Sobig.F@mm) The -request
versions of the virus ARE sent as attachments and my a/v software picks
them off.

The owner- are often sent in encoded (not decoded) format.

I've been able to detect the IP addresses of several of  the repeats and
have sent nastygrams to the registered domain contact.

Can you say "beginning of fall academic semester?"