On Thu, May 27, 2004 at 03:48:55PM +0200, Sascha Wildner wrote: > What's going on here? It's a worm. Check the headerlines, all the mails originate from 2 IP-addresses (217.227.30.96 and 80.129.253.217) in the IP-ranges of the German ISP T-Online. Somebody appears to be reading his Dragonfly-mails with Outlook Express but not using any virus scanners or so :(. bye, Harold