[plug] W32.Novarg.A at mm

[Kimberly Shelt]

On Tue, Jan 27, 2004 at 02:56:39PM +0800, Jay Turner wrote:
> It appears that the virus may just make up names to pre-pend to domain names
> as the 'reply-to' address.

> Jim, James, Tim, Josephine, Dave, Tom, Paul at hiscompany.com etc...

I have had bounced to linmagau domain primarily using legal@ an alias 
that has never sent mail :).. 

Also, Adam, Joe, Bob, Jane, David, Jack

Even in spam the feminine side is under represented :)))

K