see my posting on the klez and orig message that hasnt shown up yet.
this is one of the headers from what i assumed was a klez.  least wise
my system flagged it as klez.
jimt
Received: from hans ([209.226.121.24]) by tomts9-srv.bellnexxia.net
(InterMail vM.5.01.04.19 201-253-122-122-119-20020516) with
> I just got Bugbear from someone in the 209.226.121.x dialup pool
> (sympatico.ca) -- Hans, I kinda think it was you, better make sure your
> definitions are up to date and that you're clean...
>