Leonardo Cabral wrote: >Stephen Wilson <[EMAIL PROTECTED]> wrote: > > >>A clip of an email header is below. I was hoping someone could help me >>make sense of what is happening. It appears to be a test of some kind. >>One of my users, johnw, received this as a bounce error. He says he >>never sent this email. I checked the logs and can verify this. Also >>the header obviously shows that the email never passed through my >>server (mail.twinfirs.com). I don't know if this is someone spoofing >>return >>paths or just some sort of test that failed. >> >> > >Here we go again. It's probably someone infected with the Klez virus >(outside your net). It fakes the sender address using one took from the >address book. >Regards, > >Leonardo > >- >To unsubscribe from this list: send the line "unsubscribe xmail" in >the body of a message to [EMAIL PROTECTED] >For general help: send the line "help" in the body of a message to >[EMAIL PROTECTED] > > > > I was figuring it was something like that but it doesn't look like klez. Klez and bigbear (or bugbear, whatever...) are the only email worms I have actually seen "in the wild". It just didn't look right to me. I figure better to double check with people who have more experience.
Thanks, Steve - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
