OT: W32.Swen.A@mm

[Asmala]

Is there any way to resolve the person who sends me constantly W32.Swen.A@mm worm emails? I'd like to ask the sender to clean his computer.

[sachmo]

I had to have my ISP help me figure out who was spoofing me.

[Atrocities]

Originally posted by Asmala:
Is there any way to resolve the person who sends me constantly W32.Swen.A@mm worm emails? I'd like to ask the sender to clean his computer.

Block him and any one who sends you a virus. It is the only way to control the tide.

[Fyron]

AT, most email viruses send themselves out by stealing address books, and fake their origin. The person that is "sending" the virus probably is not even aware they have it.

[Baron Munchausen]

Yes, it fakes its source. I got a copy claiming to be from Microsoft itself in the 'From:' line! Fortunately I have Norton AV and it prevented the thing from being downloaded and activated. Are you reading all of the headers to get this source? You need to dig into other headers than the 'From:' line to find out where it is really coming from.

[Atrocities]

Originally posted by Imperator Fyron:
AT, most email viruses send themselves out by stealing address books, and fake their origin. The person that is "sending" the virus probably is not even aware they have it.

I know that is why you block everything that comes in with it attached. I did this when that Last virus was being spread around a few weeks ago and presto no more problems.

The best way to get a person who has an infected system to address the problem is to post about it or reply to all of the mail - without send the attachment back.

But 99.9% of the emails you will receive are from people you don't know, so just block them.

[Fyron]

AT... just blocking everyone it comes from is not necessarily a good idea. What about all those people that you do know and want to get emails from?

[Asmala]

Originally posted by Imperator Fyron:
AT, most email viruses send themselves out by stealing address books, and fake their origin. The person that is "sending" the virus probably is not even aware they have it.

Yeah I know all that. The person whose computer sends the virus mails to me aren't aware of it (I suppose). So I'd like to contact him and ask if he could remove the virus. But where I can dig out his email address? Here is the part of headers but I don't know if it's even possible resolve the user from that information.

code:

---

  Received: from gjkx ([195.156.180.209]) by fep07.tmt.tele.fi

          (InterMail vM.5.01.03.13 201-253-122-118-113-20010918) with SMTP

          id <20031106193527.CUQU25859.fep07.tmt.tele.fi@gjkx  >;

          Thu, 6 Nov 2003 21:35:27 +0200

---

[Fyron]

Does stuff in the "code" tags display much smaller than the rest of the post text for you?

Unless that is your IP address listed in there (or that of your email provider) along with that DNS, look into who owns the domain. That might at least tell you what domain the address is from. Other than that, I have no idea what most of it means.

[Asmala]

Originally posted by Imperator Fyron:
Does stuff in the "code" tags display much smaller than the rest of the post text for you?

Nope. The text in code tags are same size than elsewhere, just a different font.

Originally posted by Imperator Fyron:
Unless that is your IP address listed in there (or that of your email provider) along with that DNS, look into who owns the domain. That might at least tell you what domain the address is from. Other than that, I have no idea what most of it means.

No, it's not my IP address. I did whois query and now I know who owns the domain. But that's not enough. I need to know the person's username or email address as well before I can do something. The person uses dial up so he has a different IP address every time he logs in.

Is there anything I can do if he's Online and I know his IP (this is the case if I'm Online when I get the virus message)? Any way to send a message to a computer just knowing its IP?