Swen does that al the time
"Ghostmaster" <running-wild RemoveThis @the.zoo> schreef in bericht
news:_qrUb.11529$GO6.5008@newsread3.news.atl.earthlink.net...
> This is the header info. They changed the subject to Security warning,
and
> the return path is masked to look like MS I got 80 of these last week
they
> all said and looked they were all from Microsoft. Looks like the virus
> writer changed scripting for the message going out. I will only send the
> rest of this email if it is important. But it has been changed, it
doesn't
> resemble last weeks.
> From - Wed Feb 04 21:45:30 2004
> X-UIDL: 1aOztOzP3NZFkD0
> X-Mozilla-Status: 0001
> X-Mozilla-Status2: 00000000
> Status: U
> Return-Path: <security-center RemoveThis @microsoft.com>
> Received: from smtp.yahoo.com ([24.82.26.25])
> by kite (EarthLink SMTP Server) with SMTP id 1aOztOzP3NZFkD0
> for <snip>; Wed, 4 Feb 2004 18:42:59 -0800 (PST)
> Date: Wed, 04 Feb 2004 14:40:02 +0000
> From: Security-center <security-center RemoveThis @microsoft.com>
> Subject: Security warning
> To: <snip>
> References: <BD6D676DA507D6FG RemoveThis @earthlink.net>
> In-Reply-To: <BD6D676DA507D6FG RemoveThis @earthlink.net>
> Message-ID: <5JJ91E69KF4KH444 RemoveThis @microsoft.com>
> MIME-Version: 1.0
> Content-Type: text/html
> Content-Transfer-Encoding: 8bit
>
>
>
>
>