from header and sends the mail further. Excellent for people that are living in dictatorship
countries like China, USA or EU, that want to send their opinion to newsgroups or mailing
lists.
They usualy can also hack into WLAN of innocent people, and use their IP to make some
idiotic or illegal moves.
So even if the IP in header cannot be faked, it is not sure that the attack comes really from
the person that subscribed the IP.
And finally, viruses send themself without the knowledge of the users. The user is just too
stupid to own a PC, if he opens each attachement or has no firewall...
Greetings to all
LCD
Aley Keprt wrote:
I usually get lots of SPAM, but no viruses. As several Sam users already mentioned, I use a simple whitelist system to block 100% of SPAM, and allow only known addresses. But this can't currently block viruses. Unfortunatelly...
btw. You can find who sent you viruses. Although the sender e-mail address is faked, there is a valid IP address (can't be effectively faked), and with cooperation of its internet service provider, you can find the real computer. (If you have got some luck. :-)
/--- Aley
---------------------------------------------------------- Mgr.(MSc.) Ales Keprt (also known as Aley) [EMAIL PROTECTED] *** www.keprt.cz *** ICQ: 82357182 Dept. of Computer Science, VSB Technical University Ostrava, CZ - [EMAIL PROTECTED] - www.cs.vsb.cz ----------------------------------------------------------
----- Original Message ----- From: "Matthew J. Craven" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, April 05, 2004 7:11 PM
Subject: Re: Virus Madness!!! - Can somebody help?
I have at least 30 a day with all kinds of viruses like the ones you mention. I don't know if it's anything to do with the sam-users list though.
I receive them from all over the world, and yes, the addresses are normally faked.
But it's beginning to drive me to the point of distraction as well... God, I want to wring their pathetic little necks! :-D
--Matt.
On 5 Apr 04, at 18:54, Aley Keprt wrote:
Hello friends,
this is what I can the virus madness! In last fortnight I got over 50 e-mails with viruses Netsky.B and Netsky.Q. Is this normal? I think and hope it isn't. In recent 12 hours I got 6 new e-mails with Netsky.Q. This is absolutely unbelievable. I looked to the e-mail headers, and I can see the sender is always the same. Really unbelievable. The e-mail address of the sender is not visible (it is faked), but I have got the IP address. I write it below, so you all can check, if it is somewhat connected with sam-users. It is an address in Netherlands, and my only contact to Netherlands is via sam-users.
Computer name: node-d-1d4e.a2000.nl IP number: 62.195.29.78 Provider: UPC Netherlands
Is this a private computer, or a multiuser node/proxy? Can somebody help?
And does anybody receive such viruses by e-mail as well (in recent few days)?
/--- Aley
