[NLRS] K lez virus Sample of header spoofing

Ed Marciniak [email protected]
Fri, 10 May 2002 20:45:13 -0500


Here is a sample of the address spoofing from Klez. This did not come from
K0SHF (his ISP is AOL)

Sorry for the bandwidth, but I though this was worth forwarding

Return-Path: <[email protected]>
Received: from smtp.spacestar.net (smtp.spacestar.net [206.191.192.8])
 by bodb.mc.mpls.visi.com (Postfix) with ESMTP id D78CF4B43
 for <[email protected]>; Fri, 10 May 2002 19:09:16 -0500 (CDT)
Received: from Koihz (mnpdsl141.mpls.spacestar.net [206.191.228.141])
 by smtp.spacestar.net (Postfix) with SMTP id F3D1F8644
 for <[email protected]>; Fri, 10 May 2002 19:09:10 -0500 (CDT)
From: SixtCylHum <[email protected]>
To: [email protected]
Subject: A  IE 6.0 patch
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary=N277UV393831z135uqc7XL8M
Message-Id: <[email protected]>
Date: Fri, 10 May 2002 19:09:10 -0500 (CDT)