As far as i could tell from the sources of the emails referenced "you details" etc. all the ppl where using Outlook Express. They actualy where using the same version of OE (6.2 if I recall correctly).
The bad thing is that the good signal to noise ratio in this mailing list drops... If it was up to me I would just block any emails with atachments at mailing list level. Maybe allow .java and .txt attachments...
Greets Niko
----------------------------------------------------------- If you wish to unsubscribe from this mailing, send mail to
[EMAIL PROTECTED] with a subject of:
unsubscribe castor-dev
Actually, AFAIK, its a fake. IIRC, the sobig virus has a built in mailer that pretends to be outlook express, but isn't.
Cos, theres an X-MSMail-Priority header, but no valid X-MimeOLE. Also X-MailScanner: Found to be clean (bogus viral header)
The From: and To: headers are placed there by the virus randomly from addresses that you have on your PC, and bear no relation to the real sender.
Cheers
James
----------------------------------------------------------- If you wish to unsubscribe from this mailing, send mail to
[EMAIL PROTECTED] with a subject of:
unsubscribe castor-dev
