[connect24h:3351] Microsoft を名乗るウイルスメール

[NAKAU Koji (中右浩二) <koji@xxxxxxxxx>]

中右です。

昨夜と今朝、下のようなメールを受け取りました。今朝のメールについては、
大学のMXにてmultipartの一つからVirusが検出されました。FromでMicrosoft
を名乗っていますが、Received行ではiinet.net.auが起点に見えるので、
From/Toを偽っているのでしょうか？いかがでしょう。

＜Received行いくつか省略＞
| Received: from issv1.cc.tsukuba.ac.jp (issv1.cc.tsukuba.ac.jp
|     [130.158.2.200]) by shako.sk.tsukuba.ac.jp (8.10.2+Sun/3.7W) with ESMTP
|     id g2CDg3L01762 for <knakau@xxxxxxxxxxxxxxxxxxxxxx>; Tue, 12 Mar 2002
|     22:42:03 +0900 (JST)
| Received: from mail.iinet.net.au (localhost [127.0.0.1]) by
|     issv1.cc.tsukuba.ac.jp (8.11.6/3.7W11/29/01) with SMTP id g2CDfvO08210
|     for <knakau@xxxxxxxxxxxxxxxxxxxxxx>; Tue, 12 Mar 2002 22:41:57 +0900
|     (JST)
| Message-Id: <200203121341.g2CDfvO08210@xxxxxxxxxxxxxxxxxxxxxx>
| From: "Microsoft Corporation Security Center"
| <rdquest12@xxxxxxxxxxxxx> 
| To: "Microsoft Customer" <'customer@xxxxxxxxxxxxxx'>
| Subject: Internet Security Update 
| Reply-To: <rdquest12@xxxxxxxxxxxxx>
| 
| Microsoft Customer,
| 
|      this is the latest version of security update, the 
| known security vulnerabilities affecting Internet Explorer and 
| MS Outlook/Express as well as six new vulnerabilities, and is 
| discussed in Microsoft Security Bulletin MS02-005. Install now to 
| protect your computer from these vulnerabilities, the most serious of
| which 
| could allow an attacker to run code on your computer.
＜以下省略＞


------------------------------------------------------------------------
 中右 浩二 (なかう こうじ)  email: koji@xxxxxxxxx     
            札幌市豊平区    WWW: http://nakau.net/~koji/ (移行中)
------------------------------------------------------------------------

--[PR]------------------------------------------------------------------
■緊急告知
　
　   【日本初登場】世界初個人専用ドメイン『.name』ついに受付開始！
　
　　　　　　　　　http://www.onamae.com/?mid=100985
------------------------------------------------------------------[PR]--
<GMO GROUP> Global Media Online  www.gmo.jp