No,not that,but the way how intercepted it. These mails were not issued through mail program,but through worms own SMTP engine which was checked by new Internet Mail because sent number of mail exceeded threshold.