"m. kolb" <[log in to unmask]> writes: > Richard Wiggins <[log in to unmask]> writes: > >> Looks like it's a variant of MyDoom to me, not human spoofers per se. /rich > > Confirmed. It is MyDoom.M and MyDoom.M-2, of which we blocked ~9000 > yesterday. There was a gap before we got the virus definition where > some of these passed through. And in the grand old style of following up to oneself: It appears the attachment/virus on one of the variations was actually broken (i.e. not "clickable"). ./muk -- m. kolb <[log in to unmask]>