OT: W32.Swen.A@mm

[sachmo]

I had to have my ISP help me figure out who was spoofing me.

[Atrocities]

Originally posted by Asmala:
Is there any way to resolve the person who sends me constantly W32.Swen.A@mm worm emails? I'd like to ask the sender to clean his computer.

Block him and any one who sends you a virus. It is the only way to control the tide.

[Fyron]

AT, most email viruses send themselves out by stealing address books, and fake their origin. The person that is "sending" the virus probably is not even aware they have it.

[Baron Munchausen]

Yes, it fakes its source. I got a copy claiming to be from Microsoft itself in the 'From:' line! Fortunately I have Norton AV and it prevented the thing from being downloaded and activated. Are you reading all of the headers to get this source? You need to dig into other headers than the 'From:' line to find out where it is really coming from.

[Atrocities]

Originally posted by Imperator Fyron:
AT, most email viruses send themselves out by stealing address books, and fake their origin. The person that is "sending" the virus probably is not even aware they have it.

I know that is why you block everything that comes in with it attached. I did this when that Last virus was being spread around a few weeks ago and presto no more problems.

The best way to get a person who has an infected system to address the problem is to post about it or reply to all of the mail - without send the attachment back.

But 99.9% of the emails you will receive are from people you don't know, so just block them.

[Fyron]

AT... just blocking everyone it comes from is not necessarily a good idea. What about all those people that you do know and want to get emails from?

[Asmala]

Originally posted by Imperator Fyron:
AT, most email viruses send themselves out by stealing address books, and fake their origin. The person that is "sending" the virus probably is not even aware they have it.

Yeah I know all that. The person whose computer sends the virus mails to me aren't aware of it (I suppose). So I'd like to contact him and ask if he could remove the virus. But where I can dig out his email address? Here is the part of headers but I don't know if it's even possible resolve the user from that information.

code:

---

  Received: from gjkx ([195.156.180.209]) by fep07.tmt.tele.fi

          (InterMail vM.5.01.03.13 201-253-122-118-113-20010918) with SMTP

          id <20031106193527.CUQU25859.fep07.tmt.tele.fi@gjkx  >;

          Thu, 6 Nov 2003 21:35:27 +0200

---