интересно
Received: by it52.ring.itnet (mbox xata)
(with Cubic Circle's cucipop (v1.31 1998/05/13) Tue May 22 19:09:27 2007)
X-From_: mc@itnet.kovrov.ru Tue May 22 15:39:19 2007
Return-Path: <mc@itnet.kovrov.ru>
Received: from itnet.kovrov.ru (efimoff.itnet [192.168.104.129])
by it52.ring.itnet (8.12.9p2/8.12.9) with ESMTP id l4MBdItr098530
for <xata@itnet.kovrov.ru>; Tue, 22 May 2007 15:39:18 +0400 (MSD)
(envelope-from mc@itnet.kovrov.ru)
Message-Id: <200705221139.l4MBdItr098530@it52.ring.itnet>
From: mc@itnet.kovrov.ru
To: xata@itnet.kovrov.ru
Subject: [avast! - INFECTED] SERVER REPORT
Date: Tue, 22 May 2007 15:35:54 +0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_4A62B03B.B17A3B04"
X-Priority: 3
X-MSMail-Priority: Normal
X-Antivirus: avast! (VPS 000739-3, 11.05.2007), Inbound message
X-Antivirus-Status: Infected
Attachment: \data.cmd#3123623272 Virus: Win32:Mytob-QU [Wrm]
значит вирусы идут не от mc@itnet.kovrov.ru а от efimoff.itnet [192.168.104.129]
?