> Does anyone know how to send an e-mail to someone who has the above
> referenced virus. The virus strips off the return address so I do not know
> where it is coming from...however I can get the IP address. I am getting
> numerous e-mails from one particular IP address and I am assuming that the
> user does not know they have a Virus.
About the only thing you can do is scan through your logs looking for
connects from the same user when they were deliberately sending an e-mail
with their real address.
You might also try this:
C:\>nbtstat -A ip_address
If they're running windows, you'll probably see their machine name, current
login name and workgroup, which might also give you a clue.
But beware that if behind a firewall, the "user" might be anyone in an
entire corporation, in which case the best thing is to notify their IT
department. If the nbtstat works you can probably rule out the firewall
(then again it could be a poorly configured windows box or be running
Samba).
In any event, the best course as a general matter is to report the incident
to their ISP. If they can't/don't handle it, block the IP on your server and
wait for a complaint.
Mike
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
