Richard Wiggins <[log in to unmask]> writes:

> Looks like it's a variant of MyDoom to me, not human spoofers per se.  /rich

Confirmed.  It is MyDoom.M and MyDoom.M-2, of which we blocked ~9000
yesterday.  There was a gap before we got the virus definition where
some of these passed through.

./matt

--
m. kolb  <[log in to unmask]>