Re: determining real Klez worm sender?

[Charlie Summers <charlie @ lofcom . com>]

At 11:34 AM -0400 8/8/02, Kevin Kinder is rumored to have typed:

> Is there some
> way to determine the real sender of Klez email by examining the email
> headers? So far, all I can seem to determine is the originating site,
> which in most cases is no help.

   The envelope sender _used_ to be reliable, but it doesn't appear to be any
longer. Can anyone else confirm that later versinos of this thing are munging
the envelope sender as well?

         Charlie