I cut and paste the properties down below - It comes like it's form Microsoft and says "use this patch immediately!". I've never opened it and I can disenfect it but it just keeps getting sent to me about 4 times a day. When I disinfect it it comes up as KLEZ 32.
I called my IP and they said there was nothing I could do except delete it and didn't even want to see the properties I had. Any advice from anyone is appreciated!!
Received: from localhost [66.189.157.212] by mail.tmlp.com
(SMTPD32-7.07) id A03F800E00D2; Mon, 29 Dec 2003 15:36:15 -0500
From: "Microsoft" <security@microsoft.com>
To: <ATCThomas@TMLP.com>
Subject: Use this patch immediately !
MIME-Version: 1.0
Content-Type: multipart/mixed;boundary="xxxx"
Message-Id: <200312291536828.SM02700@localhost>
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [c020020c].
X-RBL-Warning: HELOBOGUS: Domain has no MX or A records.
X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [c020020c].
X-RBL-Warning: WEIGHT10: Weight of 16 reaches or exceeds the limit of 10.
X-Declude-Sender: admin@duma.gov.ru [66.189.157.212]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Spam-Tests-Failed: BADHEADERS, HELOBOGUS, IPNOTINMX, SPAMHEADERS, WEIGHT5, WEIGHT8, WEIGHT10
Date: Mon, 29 Dec 2003 15:36:17 -0500
X-RCPT-TO: <ATCThomas@TMLP.com>
Status: U
X-UIDL: 361646263