Are you 'sure' the email is coming from Ross?  The information at

http:[EMAIL PROTECTED]#technicaldeta
ils

(search for "SMTP engine")

says that the virus can forge the From: address in the emails it sends.  You
need
to trace back using the IP information in the Received lines to determine
the ISP
the email came from, and convince the ISP to use their internal logs to
determine
which user it really originated from.

Since you say that "Ross Presser" [EMAIL PROTECTED] does not exist,
anyone
that recogizes that name / address as being something old in their address
book
should check to see if they have the virus


----- Original Message -----
From: "Help on VNC" <[EMAIL PROTECTED]>
To: "VNC-LIST" <[EMAIL PROTECTED]>
Sent: Sunday, October 13, 2002 10:21 AM
Subject: BugBear Virus


> Hi Guys
>
> There is a certain person "Ross Presser" who is trying to us my mail
server to
> propogate this virus.
>
> Please be assured that the email address [EMAIL PROTECTED] does not
exist.
>
> If anyone knows this guy, please asl him to check his system for this
virus as
> it is causing havoc here. Fortunately the Firewall is trapping the mail so
the
> "List" and the "Tight List" should be safe.
>
> PLEASE! PLEASE! PLEASE!  Can someone help me to stop this!
>
> Thanks in advance
>
> Eric
> _______________________________________________
> VNC-List mailing list
> [EMAIL PROTECTED]
> http://www.realvnc.com/mailman/listinfo/vnc-list
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to