Track source of Netsky in mail?

[Gregg Hill]

Hello!

I have a client that uses Outlook 2000 and 2003 with POP accounts from their
ISP. They have about three users who keep getting Netsky stopped by Symantec
Antivirus Corporate Edition version 8.1 on their desktops. They get at least
a dozen a day on some users.

Is there any way to track down the sending user or computer? I suspect it is
not on their network, but possibly an unprotected home user with their
address book.

Thank you for the help!

Gregg Hill

 

[Milly Staples [MVP - Outlook]]

No, otherwise, this problem would have been nipped in the bud a long time
ago.

--
Milly Staples [MVP - Outlook]

Post all replies to the group to keep the discussion intact. Due to
the (insert latest virus name here) virus, all mail sent to my personal
account will be deleted without reading.

After searching google.groups.com and finding no answer, Gregg Hill asked:

| Hello!
|
| I have a client that uses Outlook 2000 and 2003 with POP accounts
| from their ISP. They have about three users who keep getting Netsky
| stopped by Symantec Antivirus Corporate Edition version 8.1 on their
| desktops. They get at least a dozen a day on some users.
|
| Is there any way to track down the sending user or computer? I
| suspect it is not on their network, but possibly an unprotected home
| user with their address book.
|
| Thank you for the help!
|
| Gregg Hill

 

[Gregg Hill]

I was afraid that my suspicions would be confirmed. Bummer.

Thank you, MillY!

Gregg Hill

 

[Diane Poremsky [MVP]]

you can look at the header and identify the isp the infected person uses,
but you really can't identify the actual person unless you know their IP
address. You can report it to the abuse address for the isp - use
www.dnsstuff.com or other whois service to identify the isp.

--
Diane Poremsky [MVP - Outlook]
Author, Teach Yourself Outlook 2003 in 24 Hours
Coauthor, OneNote 2003 for Windows (Visual QuickStart Guide)
Author, Google and Other Search Engines (Visual QuickStart Guide)



Join OneNote Tips mailing list: http://www.onenote-tips.net/

Vote for your favorite Outlook and Exchange utilities in the
Slipstick Ratings Raffle at http://www.slipstick.com/contest/