"m. kolb" <[log in to unmask]> writes:
> Richard Wiggins <[log in to unmask]> writes:
>> Looks like it's a variant of MyDoom to me, not human spoofers per se. /rich
> Confirmed. It is MyDoom.M and MyDoom.M-2, of which we blocked ~9000
> yesterday. There was a gap before we got the virus definition where
> some of these passed through.
And in the grand old style of following up to oneself:
It appears the attachment/virus on one of the variations was actually
broken (i.e. not "clickable").
m. kolb <[log in to unmask]>