Got some more in this morning.
The first message bounced back from:
relay4.volny.cz [212.20.96.13]
The second bounced back from
[204.17.27.162] (returned from
www.jobwarehouse.com)
The third bounced from:
[204.17.27.162] (returned from
www.jobwarehouse.com)
The fourth (no attachment this time!)
mailhost2.reliant.com
The fifth (no attachment)
mailhost2.reliant.com
and the sixth (with attachment)
adinet.com.uy
I can understand the jobwarehouse one, because I use that hotmail address there (it's my job search e-mail address).
Obviously the virus is still active. I know that ".cz" is Checkoslovakia, but where is ".uy"?