>i have a user getting about 100 notifications a day from an unknown source >trying to send the SirCam worm virus. >------------------------- >Declude Virus v1.46 caught the : W32/Sircam.worm@mm virus in Volumn.doc.bat >from <> to: (ouruser)@(ourdomain).com. > >Date: 05/10/2002 09:45:51 >Subject: Volumn >Spool File: Ddd1c02d800f8614a.SMD >------------------------- >can i stop this one particular one somehow?
The best thing to do is check out what IP address it is coming from. From the IP, you may be able to determine who is sending it (or, you can contact whoever is responsible for that IP, by using IPWHOIS at http://www.DNSstuff.com ). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
