[dba-Tech] Lots of Virii attempts today

Tortise@Paradise tortise at paradise.net.nz
Sat Aug 23 02:03:08 CDT 2003


RE: [dba-Tech] Norton FirewallKewl
Can you advise the Whois URL for IP addresses, I can only find it for x.com's etc.
Kind regards,
David
Engines2Go - Now THAT's a Search Engine!
Automated major search engine manager
Makes searching quicker and easier - Have you tried it? 
http://www.engines2go.com/  
http://www.cheqsoft.com/  The home of Clipboard Express, MP3 Detective, TimesOwn and Break Reminder.
  ----- Original Message ----- 
  From: Drew Wutka 
  To: Discussion of Hardware and Software issues 
  Sent: Friday, August 22, 2003 7:52 AM
  Subject: Re: [dba-Tech] Lots of Virii attempts today


  Just a little FYI on this virus.  It DOES NOT use the email address of the infected machine to send out emails.  It sends them out using random email addresses found on the users machine.  What does that mean in English?  If your anti-virus software sends a notice to the sender of a virus (like yours did here Arthur), you are notifying the wrong person.  We have gotten tons of these notices, because our employee's email addresses are being spoofed by this virus!

  To actually determine what is sending out these emails, look at the header info of the email.  That will give you the machine name and IP Address of the computer sending out the viruses.  Get the WhoIS information for that IP Address, and notify the Abuse or Tech person for that IP Address.  It may help them if you include a copy of the header information.

  Drew
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://databaseadvisors.com/pipermail/dba-tech/attachments/20030823/c0732433/attachment.html>


More information about the dba-Tech mailing list