"m. kolb" <[log in to unmask]> writes:

> Richard Wiggins <[log in to unmask]> writes:
>
>> Looks like it's a variant of MyDoom to me, not human spoofers per se.  /rich
>
> Confirmed.  It is MyDoom.M and MyDoom.M-2, of which we blocked ~9000
> yesterday.  There was a gap before we got the virus definition where
> some of these passed through.

And in the grand old style of following up to oneself:

It appears the attachment/virus on one of the variations was actually
broken (i.e. not "clickable").

./muk

--
m. kolb  <[log in to unmask]>