Now I got a virus - Ein alte AMI needs help!

Hallo,

I guess [email protected] is in trouble? At least i just
received a Readme.pif from management-ZzaviYqMH0lcpXkO/[email protected], but it was
faked. This address does not exist, but the Return-path is set to
steffens address! How is this possible? He is using Mutt and not
Outlook!

I strongly assume it has to to with our addresses in the knoppix mailing
list? Have others received strange mails from members of the mailinglist
as Return-path? 

Greetings 

Achim

PS: With linux is fun receiving viruses;-)

Return-path: <[email protected]>
Envelope-to: _-ZzaviYqMH0lcpXkO/[email protected]
Delivery-date: Sat, 13 Mar 2004 13:31:02 +0100
Received: from [164.100.188.2] (helo=ngoa)
	by mxng14.kundenserver.de with smtp (Exim 3.35 #1)
	id 1B28I4-0004MN-00
	for _-ZzaviYqMH0lcpXkO/[email protected]; Sat, 13 Mar 2004 13:30:58 +0100
Date: Sat, 13 Mar 2004 18:05:59 +0530
To: _-ZzaviYqMH0lcpXkO/[email protected]
Subject: Email account utilization warning.
From: management-ZzaviYqMH0lcpXkO/[email protected]
Message-ID: <girjkmmcbuygmfgmjal-ZzaviYqMH0lcpXkO/[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="--------bdcmlxnleonfyremjtcl"

Dear  user of Ing-buero-unger.de gateway e-mail server,

We  warn you about some attacks  on  your e-mail account. Your computer 
may
contain viruses, in order to keep  your computer and e-mail account
safe,
please, follow the instructions.

Please, read  the attach for further  details.

Best  wishes,
     The Ing-buero-unger.de  team                             
http://www.ing-buero-unger.de


[Readme.pif  application/octet-stream (16761 bytes)]
....