and I know the current advice is to just delete it and wait it out but I'm trying to think of a more positive spin that sounds less like "ignore it and hope it goes away".
On a more worrying note I looked in one of the bounce messages and it looks as if the original spam passed through a postini filter, though that line could have been forged I guess.