I would have thought that "System Attendant" would have known this, but it is probably an automatic response which hasn't been updated to say the virus "Apparently" came from you. The message is probably still worth sending, as there is a possibility that the email did come from your computer, if it had been infected, and this should cause you to do a scan with your anti-virus program, just in case.

NO NO NO! a thousand times NO


DO NOT SEND "VIRUS DETECTED" MESSAGES TO THE FROM ADDRESS!

If you are an e-mail system admin who has such a configuration, give yourself a quick upper cut to the jaw and then go and disable it.

Why? Well...

A virus get's loose on the internet and goes crazy sending itself around the place with fake "from addresses". An anti-virus "virus detected" response to the innocent party, with the anti-virus companies little "ad" tagged on the bottom, is nothing but spam and doubles the amount of e-mail traffic clogging up the net due to the virus.

For a more detailed rave see;


http://www.attrition.org/security/rant/av-spammers.html


As to the offending mail, we do know the source IP address and the time the mail was sent, and that the luser uses Microsoft outlook, it's in the received header of the message.

 Received:
    from Desktop (167.a.001.cba.iprimus.net.au [210.50.171.167])
    by duckula.hotkey.net.au (8.11.6/8.11.6) with SMTP id i4DAbg515920
    for <[EMAIL PROTECTED]>;
     +1000t

X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)

So if you're feeling really neighbourly you could call Iprimus and send them that info and they could troll through their RAS server logs and see which phone number was allocated the IP address 210.50.171.167 at Thu, 13 May 2004 20:37:42, and they could then find the culprit, and call them up and, and ....

tell them that, like thousands before them, they've got a virus??

But they probably won't :-(

BTW did anybody go flying lately?

P.

_______________________________________________
Aus-soaring mailing list
[EMAIL PROTECTED]
http://lists.internode.on.net/mailman/listinfo/aus-soaring

Reply via email to