I got one of these today too, exactly the same except different domain names. The sender was bogus, but the recipient was genuine. Since it was different from all the other "cleaned" virus emails we've been getting, I took it down to a security expert here. He was surprised, too. I left him scratching his head about it...

>Here is what I got yesterday (along with few viruses from unrecognised addresses and few Mail Returns):
>
>
> V I R U S A L E R T
>
>Our virus checker found the
>
> 'W32/Sobig-F'
>
>virus in your email to the following recipient:
>
>-> crt@kiski.net
>
>Delivery of the email was stopped!
>
>Please check your system for viruses,
>or ask your system administrator to do so.
>
>For your reference, here are headers from your email:
>------------------------- BEGIN HEADERS -----------------------------
>Return-Path:
>Received: from INTERNET (unknown [213.182.170.2])
>by home.highvision.net (Postfix) with ESMTP id 047C75A8AF
>for ; Wed, 20 Aug 2003 11:07:49 -0400 (EDT)
>From:
>To:
>Subject: Re: Approved
>Date: Wed, 20 Aug 2003 19:11:28 +0400
>X-MailScanner: Found to be clean
>Importance: Normal
>X-Mailer: Microsoft Outlook Express 6.00.2600.0000
>X-MSMail-Priority: Normal
>X-Priority: 3 (Normal)
>MIME-Version: 1.0
>Content-Type: multipart/mixed;
>boundary="_NextPart_000_027B39E5"
>Message-Id: <20030820150749.047C75A8AF@home.highvision.net>
>-------------------------- END HEADERS ------------------------------
>
>However, I can not send messages from this address at home, only receive messages...
>
>>Hi nadya,
>>
>>>I got around 10 of these by the address yesterday, I currently don't use on UT, but used some time ago...
>>
>>Interestingly I recieved this in my mailbox:
>>
>>This is an automatically generated Delivery Status Notification.
>>Delivery to the following recipients failed.
>> nnosonov@thewarrengroup.com
>>
>>
>>Now I do know my machines are not spreading the mails as they're using an up to date virusscanner.
>>
>>Walter,