The from address is typically forged, but seems to be frequently be real
addresses.
I've been getting quite a large number of virus disinfection replies to
various addresses that come to me. (Quite odd, too, since some of the
addresses being used haven't been used for 10 years, but are still
forwarding mail to my real addresses...)
--Dean
On Fri, 29 Aug 2003, Fam. van den Berg wrote:
All,
Today I recieved 2 mails with the following subjects:
Wicked screensaver
Thank you!
The sender was owner(_at_)ietf(_dot_)org, according to the header.
This may indicate that this ietf mailinglist is infected with the sobig
f virus.
I recommend that all the participiants on this list update their
virusscanner and scan their computer for viruses.
With kind regards,
A. van den Berg, Netherlands