Richard Wiggins <[log in to unmask]> writes: > Looks like it's a variant of MyDoom to me, not human spoofers per se. /rich Confirmed. It is MyDoom.M and MyDoom.M-2, of which we blocked ~9000 yesterday. There was a gap before we got the virus definition where some of these passed through. ./matt -- m. kolb <[log in to unmask]>