On Thu, 2002-10-03 at 16:34, Peter Vandenabeele wrote:
This is very typical for the Klez virus.
Very probably it's not Klez, since my sweep (updated last month)
intercepts it. Must be something else.
The From: (and sometimes also From) is spoofed. This makes it harder
to fight the virus due to confusion amongst less experienced recipients
of the virus.
This one actually came from:
Received: from unknown (HELO relay05.indigo.ie) (194.125.133.229)
by ione.mind.be with SMTP; 2 Oct 2002 19:16:33 -0000
Received: (qmail 95461 messnum 1194794 invoked from network[194.125.174.75/ts09-075.dublin.indigo.ie]); 2 Oct 2002 19:18:49 -0000
Received: from ts09-075.dublin.indigo.ie (HELO sturm) (194.125.174.75)
by relay05.indigo.ie (qp 95461) with SMTP; 2 Oct 2002 19:18:49 -0000
That's the same header as I received. So "indigo.ie" subscribers watch
out for virus!
Regards
iz