GENMSC-L ArchivesArchiver > GENMSC > 2002-05 > 1022558706
From: "Mick Gurling" <>
Subject: Re: WARNING - Dangerous messages from Hertfordshire
Date: Tue, 28 May 2002 04:05:06 GMT
References: <HewI8.1392$2O2.firstname.lastname@example.org>, <email@example.com>, <acutvh$ssebv$2@ID-99845.news.dfncis.de>
So far using the originatin IP in the header and Sam Spade - I've tracked
them and gotten acknowledgements from their ISPs
(Well in one case I used neotrace to find a contact at the ISP)
"Heather Figueroa" <> wrote in message
> "The Roman" <> wrote in message
> > If your email address appears in the FROM field of the virus
> messages then
> > it means that someone who has you in their Outlook Express address
> book has
> > been infected. The virus chooses an address from the victim's
> address book
> > when sending itself out. You may be able to establish who the
> sender is by
> > looking at the headers of the virus email (Properties).
> Not necessarily........check Klez out at the various antivirus sites.
> Seems it is an elusive one to track down who is infected.
|Re: WARNING - Dangerous messages from Hertfordshire by "Mick Gurling" <>|