He averiguado que el virus falsea el remitente pero no falsea las cabeceras Received:. Se puede seguir de donde viene y en mi opinion viene de todos estos dominios.
206.adsl.iptelecom.fr adicia.telenet-ops.be ahuumrelay2.ams.ops.eu.uu.net ali.pb.cz altrade.nijmegen.internl.net antilope.cs.interbusiness.it aquiles.alternet.com.br ateneu.slatina.ro avsia.com B8061.b.pppool.de bih.bih.nic.in birmingham1.newey-and-eyre.com blount.mail.mindspring.net broadviewnet.net c000.yma.cp.net c002.snv.cp.net caicos.telesurf.com.py carbon.btinternet.com cascadenetworks.com cer.yubc.net chimta05.algx.net com4.com.br community.firenze.net cos1.hokuriku.ne.jp cpmail.dk.tiscali.com cpu0011.ba.gov.br dialup0.avonil.net dialup264.ts524.cwt.esat.net epic.mail.pas.earthlink.net eta.fastwebnet.it eurus.primus.ca everwei.com.tw f1.f1net.com.br falcon.mail.pas.earthlink.net fed1mtao05.cox.net fedex.is.co.za femail11.im.home.ne.jp fep14.tmt.tele.fi fido.kiva.net forthnet.gr fozzie.webservepro.com grunt21.ihug.com.au harppi.kpo.fi he106war.uk.vianw.net hfep06.dion.ne.jp hnexfe06.hetnet.nl hnexfe07.hetnet.nl hnexfe08.hetnet.nl hnexfe09.hetnet.nl hnexfe10.hetnet.nl hnexfe11.hetnet.nl host.ibericahosting.com hs14.tram.ne.com hut.comstar.ru huva.hittite.isp.9tel.net ida.net imf22aec.mail.bellsouth.net imsmta2.indosat.net.id indigomail00.svc.cra.dublin.eircom.net indigomail01.svc.cra.dublin.eircom.net jtkf3.jtkf.hu juiz.geniusonline.com.br kubrick.fc-net.fr lakecmmtao02.coxmail.com lakecmmtao03.coxmail.com lakemtao04.cox.net larry.aptalaska.net lvgreystone.com lx007.sesc.com.br mail004.syd.optusnet.com.au mail00.svc.cra.dublin.eircom.net mail013.syd.optusnet.com.au mail01e.rapidsite.net mail01.madeira-edu.pt mail01.svc.cra.dublin.eircom.net mail023.syd.optusnet.com.au mail02.svc.cra.dublin.eircom.net mail03.svc.cra.dublin.eircom.net mail06.svc.cra.dublin.eircom.net mail11.cybertrails.com mail1.biz.inet.co.th mail1.codetel.net.do mail1.mail.iol.ie mail2.infinito.it mail2.ipsnet.it mail2.netnam.vn mail3.edisontel.com mail41.fg.online.no mail45.fg.online.no mail47.fg.online.no mail4.edisontel.com mail502.nifty.com mail504.nifty.com mail.abox2.so-net.ne.jp mail.aste.ac.nz mail.aura-press.com mail.avantac.com mail.big.net.au mail.changkang.com.tw mail.chariot.net.au mail.ebtnet.net mail.g.bonet.se mail.globonet.hu mail.gmx.net mailgw1.qatar.net.qa mail.libertysurf.net mail.montevideo.com.uy mail.net2000.com.au mail.rd5.so-net.ne.jp mail.royalisp.com mail.salekhard.ru mailserver.aimcomm.com mail.servicoopsa.com.ar mailsys01.intnet.net mail.tazland.com mail.traman.net mailuio.impsat.net.ec mail.uniud.it majordomo.vol.cz mclean.mail.mindspring.net mcmmta3.mediacapital.pt mf2.bredband.net mfep2.connect.com.au mfep3.connect.com.au mgate11.so-net.ne.jp ms26.tisnet.net.tw ms8.tisnet.net.tw msg01.ip2.net msr24.hinet.net msr3.hinet.net msr76.hinet.net mta02bw.bigpond.com mta02.onolab.com mta03bw.bigpond.com mta05ps.bigpond.com mta06bw.bigpond.com mta07ps.bigpond.com mta08.mail.mel.aone.net.au mta10.mail.mel.aone.net.au mta12.mail.mel.aone.net.au mta16.mail.mel.aone.net.au mta3.adelphia.net mta4.xnet.ro mta7.pltn13.pbi.net mwinf0101.wanadoo.fr mwinf0102.wanadoo.fr mwinf0103.wanadoo.fr mwinf0104.wanadoo.fr mwinf0202.wanadoo.fr mwinf0302.wanadoo.fr mwinf0401.wanadoo.fr mwinf0403.wanadoo.fr mwinf0501.wanadoo.fr mwinf0504.wanadoo.fr mwinf0604.wanadoo.fr mwinf0801.wanadoo.fr mx.senergy.ru mxsf13.cluster1.charter.net net1.nw.com.au nims.wr.org northknox.net ns0.mediasites.com ns1.cableol.net ns1.carats.net ns3978.ovh.net ns.bintangbrothers.com ns.slovanet.net nsvmj2.zaq.ne.jp nycsmtp3out.rdc-nyc.rr.com ohsmtp03.ogw.rr.com onlink2.onlink.net pbs3.tnc.ne.jp pluto.isd-holland.nl portoweb.com.br postman.jah.ne.jp post.tomica.ru pproxy110.mbn.or.jp prsv1.mei.ne.jp pyson.com raju.host4u.net relay1.bt.net rhombus.bright.net rv2.conectia.es scaup.mail.pas.earthlink.net sccrmhc11.comcast.net sccrmhc13.comcast.net senergy.ru server1.ntl.matrix.com.br [EMAIL PROTECTED] silkroad.ne.jp sknbib.skien.folkebibl.no slpcu.org smarthost2.mail.uk.easynet.net smtp01.syd.iprimus.net.au smtp02.syd.iprimus.net.au smtp110.tiscali.dk smtp13.singnet.com.sg smtp1.fre.skanova.net smtp1.sinet.sk smtp1.vol.cz smtp22.singnet.com.sg smtp24.singnet.com.sg smtp2.fre.skanova.net smtp2.iconet.com.br smtp3.clb.oleane.net smtp5.hy.skanova.net smtp9.jaring.my smtp.btinet.net smtp.crux.ocn.ne.jp smtp.hccnet.nl smtp.netizen.com.ar smtp.prodigy.net.mx smtprelay02.ispgateway.de smtp.sage.ocn.ne.jp smtp.sweet.ocn.ne.jp smtp.web.de smtpzilla5.xs4all.nl soud.pb.cz sparqnet.net srv1.mail.cv.net srv2.resnet.ohio-state.edu ssemail008.crayfish.net sunfire.hamptonsreo.com tnpsmtp.telenor.se triton.rstel.net tungsten.btinternet.com turbo.ceinternet.com.au ultramail.gumruk.gov.tr varoshaza.nagyatad.hu vsmtp12.tin.it vsmtp2.tin.it vsmtp3.tin.it webmail.tiscali.de www.edidee.com zlatibor.yubc.net Son demasiados. No me extraña que estemos recibiendo tanta basura. Los postmaster de estos dominios tienen la responsabilidad de avisar a los usuarios que están contaminando a todo el mundo, o lo que sea, pero parece que no hacen gran cosa. -- Un saludo Antonio Castro /\ /\ Ciberdroide Informática \\W// << http://www.ciberdroide.com >> _|0 0|_ +-oOOO-(___o___)-OOOo---------------------+ | . . . . U U . Antonio Castro Snurmacher | | . . . . . . . [EMAIL PROTECTED] | +()()()---------()()()--------------------+