> This message was actually sent from an external IP not me..
> Our operations team is investigating....
> <hrm>
> > Worm/Klez.E virus
As most of us know, Klez grabs two e-mail addresses from the inflected
user's Microsoft Outlook address book and uses them as the from and to
addresses.
It appears the machine at 207.173.203.224 calling itself "Ouxcz" is the
infected system. It also appears that the infected party is using Tucows
e-mail product:
Received: from [207.173.203.224] (HELO Ouxcz)
by fr1.webmaillogin.com (CommuniGate Pro SMTP 4.0.5)
with SMTP id 571967 for [EMAIL PROTECTED]; Mon,
17 Feb 2003 17:46:17 -0500
