[dba-Tech] Lots of Virii attempts today

RE: [dba-Tech] Norton FirewallAs long as you don't use it too frequently (because then I'll get blocked), you can use it from my site.

http://wolfwares.com/whoistest.asp

Drew
  ----- Original Message ----- 
  From: Tortise at Paradise 
  To: Discussion of Hardware and Software issues 
  Sent: Saturday, August 23, 2003 2:03 AM
  Subject: Re: [dba-Tech] Lots of Virii attempts today


  Kewl
  Can you advise the Whois URL for IP addresses, I can only find it for x.com's etc.
  Kind regards,
  David
  Engines2Go - Now THAT's a Search Engine!
  Automated major search engine manager
  Makes searching quicker and easier - Have you tried it? 
  http://www.engines2go.com/  
  http://www.cheqsoft.com/  The home of Clipboard Express, MP3 Detective, TimesOwn and Break Reminder.
    ----- Original Message ----- 
    From: Drew Wutka 
    To: Discussion of Hardware and Software issues 
    Sent: Friday, August 22, 2003 7:52 AM
    Subject: Re: [dba-Tech] Lots of Virii attempts today


    Just a little FYI on this virus.  It DOES NOT use the email address of the infected machine to send out emails.  It sends them out using random email addresses found on the users machine.  What does that mean in English?  If your anti-virus software sends a notice to the sender of a virus (like yours did here Arthur), you are notifying the wrong person.  We have gotten tons of these notices, because our employee's email addresses are being spoofed by this virus!

    To actually determine what is sending out these emails, look at the header info of the email.  That will give you the machine name and IP Address of the computer sending out the viruses.  Get the WhoIS information for that IP Address, and notify the Abuse or Tech person for that IP Address.  It may help them if you include a copy of the header information.

    Drew


------------------------------------------------------------------------------


  _______________________________________________
  dba-Tech mailing list
  dba-Tech at databaseadvisors.com
  http://databaseadvisors.com/mailman/listinfo/dba-tech
  Website: http://www.databaseadvisors.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://databaseadvisors.com/pipermail/dba-tech/attachments/20030826/a555ee2f/attachment.html>