You are right, IP is just a computer number, not a human. But if I have the IP address which originated the mail, it means that this particular computer was used to spread the virus. And I will ask the ISP to stop this. They are able to do it. Not sure, but I hope they can help me.
Aley ----- Original Message ----- From: "LCD" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, April 05, 2004 8:17 PM Subject: Re: Virus Madness!!! - Can somebody help? > Anything can be faked, ever heard about "remailers"? That is a server > thatstrips the real IP > from header and sends the mail further. Excellent for people that are > living in dictatorship > countries like China, USA or EU, that want to send their opinion to > newsgroups or mailing > lists. > They usualy can also hack into WLAN of innocent people, and use their IP > to make some > idiotic or illegal moves. > So even if the IP in header cannot be faked, it is not sure that the > attack comes really from > the person that subscribed the IP. > And finally, viruses send themself without the knowledge of the users. > The user is just too > stupid to own a PC, if he opens each attachement or has no firewall... > > Greetings to all > > LCD > > Aley Keprt wrote: > > >I usually get lots of SPAM, but no viruses. As several Sam users already > >mentioned, I use a simple whitelist system to block 100% of SPAM, and allow > >only known addresses. But this can't currently block viruses. > >Unfortunatelly... > > > >btw. You can find who sent you viruses. Although the sender e-mail address > >is faked, there is a valid IP address (can't be effectively faked), and with > >cooperation of its internet service provider, you can find the real > >computer. (If you have got some luck. :-) > > > >/--- > >Aley > > > >---------------------------------------------------------- > >Mgr.(MSc.) Ales Keprt (also known as Aley) > >[EMAIL PROTECTED] *** www.keprt.cz *** ICQ: 82357182 > >Dept. of Computer Science, VSB Technical University > >Ostrava, CZ - [EMAIL PROTECTED] - www.cs.vsb.cz > >---------------------------------------------------------- > > > > > >----- Original Message ----- > >From: "Matthew J. Craven" <[EMAIL PROTECTED]> > >To: <[EMAIL PROTECTED]> > >Sent: Monday, April 05, 2004 7:11 PM > >Subject: Re: Virus Madness!!! - Can somebody help? > > > > > > > > > >>I have at least 30 a day with all kinds of viruses like the ones you > >>mention. I don't know if it's anything to do with the sam-users list > >>though. > >> > >>I receive them from all over the world, and yes, the addresses are > >>normally faked. > >> > >>But it's beginning to drive me to the point of distraction as well... > >>God, I want to wring their pathetic little necks! :-D > >> > >>--Matt. > >> > >>On 5 Apr 04, at 18:54, Aley Keprt wrote: > >> > >> > >> > >>>Hello friends, > >>> > >>>this is what I can the virus madness! In last fortnight I got over 50 > >>>e-mails with viruses Netsky.B and Netsky.Q. Is this normal? I think > >>>and hope it isn't. In recent 12 hours I got 6 new e-mails with > >>>Netsky.Q. This is absolutely unbelievable. I looked to the e-mail > >>>headers, and I can see the sender is always the same. Really > >>>unbelievable. The e-mail address of the sender is not visible (it is > >>>faked), but I have got the IP address. I write it below, so you all > >>>can check, if it is somewhat connected with sam-users. It is an > >>>address in Netherlands, and my only contact to Netherlands is via > >>>sam-users. > >>> > >>>Computer name: node-d-1d4e.a2000.nl > >>>IP number: 62.195.29.78 > >>>Provider: UPC Netherlands > >>> > >>>Is this a private computer, or a multiuser node/proxy? Can somebody > >>>help? > >>> > >>>And does anybody receive such viruses by e-mail as well (in recent few > >>>days)? > >>> > >>> > >>>/--- > >>>Aley > >>> > >>> > >>> > > > >
