|
All the ones I have seen have the same sender and subject.
John
��� Sender: [EMAIL PROTECTED] IP Address: 208.11.116.136 �Recipient: xxx �� Subject: YOUR PAYPAL.COM ACCOUNT EXPIRES �MessageID: hAEEHY425830 ��� Report: /var/spool/MailScanner/incoming/3534/./hAEEHY425830/www.paypal.com.scr� Infection: W32/[EMAIL PROTECTED]
Full headers are:
�Return-Path: <g> �Received: from localhost (adsla-136.brazosnet.com [208.11.116.136]) ����� by mailin-1.isoc.net (8.11.6/8.11.6) with SMTP id hAEEHY425830 ����� for <[EMAIL PROTECTED]>; Fri, 14 Nov 2003 09:17:34 -0500 �Date: Fri, 14 Nov 2003 09:17:34 -0500 �Message-Id: <[EMAIL PROTECTED]> �From: "PayPal.com" <[EMAIL PROTECTED]> �To: xxx �Reply-To: [EMAIL PROTECTED] �X-Priority: 1 (High) �Subject: YOUR PAYPAL.COM ACCOUNT EXPIRES �MIME-Version: 1.0 �Content-Type: multipart/mixed; boundary="----------419864D50A78811"
|
- [Modus] Any Change in Stored Procedure with Rodopi... Suneel Jhangiani
- [Modus] Implemented sql quarantine (Is their ... GlobalNet
- [Modus] Implemented sql quarantine (Is th... Gene DuCharme
- [Modus] Implemented sql quarantine (I... GlobalNet
- [Modus] Implemented sql quarantin... GlobalNet
- [Modus] Implemented sql quar... Gene DuCharme
- [Modus] Implemented sql quar... Gene DuCharme
- [Modus] Implemented sql ... Mark Thornton
- [Modus] Implemented sql quarantin... Bill Rakowitz
- [Modus] Implemented sql quarantine (Is th... TIASpeed
- [Modus] MiMail.I what out, might want... ISOC Network Operations
- [Modus] MiMail.I what out, might ... Robert Button
- [Modus] MiMail.I what out, m... TIASpeed
- [Modus] MiMail.I what out, m... Mike Herrera
- [Modus] MiMail.I what ou... Robert Button
- [Modus] MiMail.I what ou... Lewis Watson
- [Modus] MiMail.I what ou... Mike Herrera
- [Modus] MiMail.I what ou... TDE Internet
- [Modus] Virus Definition... Lapo Nustrini
- [Modus] Virus Definition... Robin Keller
- [Modus] Change Logoff ur... GlobalNet
