> So, I can only assume that because the headers did not specify it as Outlook > Express, one could feasibly assume (since they are the only two clients > affected by Klez) that it would have to be Outlook. I am sorry that I don't > know Klez quite that intimitely.
Just an FYI for those still interested in this subject... Klez actually sends the mail itself, it doesn't use outlook to do it, which is why there is no mail client identification header in Klez generated e-mail. It only uses outlook to begin execution and pluck two victims e-mail addresses from the outlook address book.
