Re: [Cooker] OT: on current viruses

[Luca Berra]

On Sun, Aug 24, 2003 at 04:01:13PM -0400, Levi Ramsey wrote:
On Sun Aug 24 17:16 +0200, Luca Berra wrote:
On Sun, Aug 24, 2003 at 03:56:21PM +0200, Till Kamppeter wrote:
>Anyone knows a way how to find the box where the virus e-mails (not the 
>error messages, the mails from the virus itself) come from? I would like 
>to inform the users of the infected machines, as these mails are annoying.
use the headers, but how exactly would you inform the user?
Run a whois on the IP and, especially if it's a .edu, mail [EMAIL PROTECTED]  In
my experience .edu's are fairly quick to disable the ethernet jacks of
machines infected by worms.
try that if it is just a big provider, and the user has a dynamic ip :(

L.

--
Luca Berra -- [EMAIL PROTECTED]
       Communication Media & Services S.r.l.
/"\
\ /     ASCII RIBBON CAMPAIGN
 X        AGAINST HTML MAIL
/ \