Wasn't this a sign of either the Mimail or Blaster virus a few weeks ago that it would send email using the "[EMAIL PROTECTED]"?
Nate Couch EDS Messaging > ---------- > From: Kim Schotanus > Reply To: Exchange Discussions > Sent: Monday, September 22, 2003 7:19 AM > To: Exchange Discussions > Subject: RE: [EMAIL PROTECTED] > > Microsoft Mail Internet Headers Version 2.0 > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Date: Mon, 22 Sep 2003 13:49:04 +0200 > MIME-Version: 1.0 > Content-Type: multipart/report; report-type=delivery-status; > boundary="9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b" > X-DSNContext: 335a7efd - 4457 - 00000001 - 80040546 > Message-ID: <[EMAIL PROTECTED]> > Subject: Delivery Status Notification (Failure) > > --9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b > Content-Type: text/plain; charset=unicode-1-1-utf-7 > > --9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b > Content-Type: message/delivery-status > > --9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b > Content-Type: message/rfc822 > > Received: from mail pickup service by morpheus.intas.be with Microsoft > SMTPSVC; > Mon, 22 Sep 2003 13:49:03 +0200 > thread-index: AcOA/4U6leJxzAlUTPW20EQujsqr6w== > Thread-Topic: ScanMail Message: To Sender virus found and action taken. > From: <Administrator> > Sender: <Administrator> > To: <[EMAIL PROTECTED]> > Subject: ScanMail Message: To Sender virus found and action taken. > Date: Mon, 22 Sep 2003 13:49:03 +0200 > Message-ID: <[EMAIL PROTECTED]> > MIME-Version: 1.0 > Content-Type: text/plain; > charset="utf-8" > Content-Transfer-Encoding: 7bit > X-Mailer: Microsoft CDO for Exchange 2000 > Content-Class: urn:content-classes:message > Importance: normal > Priority: normal > X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300 > X-OriginalArrivalTime: 22 Sep 2003 11:49:03.0874 (UTC) > FILETIME=[85593E20:01C380FF] > > > --9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b-- > > Kind regards, > Kim Schotanus > =========================== > Kim Schotanus > Information Systems Manager > > INTAS > Avenue des Arts 58 > B-1000 Brussels > Belgium > > T. +32 2 549 01 11 > F. +32 2 549 01 56 > > =========================== > > > -----Original Message----- > From: Andy David [mailto:[EMAIL PROTECTED] > Sent: maandag 22 september 2003 14:09 > To: Exchange Discussions > Subject: Re: [EMAIL PROTECTED] > > > Mongo check headers. > > > ----- Original Message ----- > From: "Kim Schotanus" <[EMAIL PROTECTED]> > To: "Exchange Discussions" <[EMAIL PROTECTED]> > Sent: Monday, September 22, 2003 5:15 AM > Subject: [EMAIL PROTECTED] > > > Hi there, > > I'm getting more and more virusses coming from [EMAIL PROTECTED], we have > no address called [EMAIL PROTECTED] (not even as an alias). I cannot trace > where the mails are coming from... Any ideas? > > kim > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=& > lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=& > lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&la > ng=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]