E-Mail Tracking Help Please 1

[deklin]

Hi,

I am having a major problem. Someone has been sending one of my employees inapproprate emails and intentionally including threats and virus' in them. I know the the person is traveling around and using free "hot spots" (Starbucks, Airports, Etc.) to do this. How do I track down the individual?

Thanks a lot

Deklin

"What goes up must come down. Ask any system administrator."

 

[Marcs41]

Keep the headers and compare them after a while, some may contain identical parts.
If he/she is using the same mailaddress, send a message from an offsite account, hotmail or so, with a friendly message abot some info, as if you where sending it to John Aplleby or so. Basically, it would 'look' to him as if where addressing the wrong person, and if you are in luck, he will reply to that. Whatever you send, do NOT mention the 'attacks' or so, play the 'stupid' one who just send an email to the wrong person.

If any repetitive parts are found in the headers, block it.

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!
How Do You Get Great Answers To my Tek-Tips Questions?} See faq222-2244

 

[eyec]

can you post the headers here? i will take a look at them and see what i can tell you.

 

[deklin]

Do email headers contain any type of definitive tracking information. For example the originatin mac address of the sender?

Deklin

"What goes up must come down. Ask any system administrator."

 

[eyec]

yes they show the complete route the email took from point A to point B. however, if the person sending them is savvy they can bugger up some of the header info.

just looking at them doesn't do much good. the application of some investigative software/methods tell more of the story.

 

[deklin]

how would i go about viewing the complete header information? sometimes it doesnt show up by the default view

Deklin

"What goes up must come down. Ask any system administrator."

 

[eyec]

if you are using Outlook (XP or 2000)

right click on the message in the INBOX
click on OPTIONS
look at the bottom of the popup & you will see INTERNET HEADERS

this is the info you need

 

[marshall44]

Can the 'out of office notification' in outlook 2003 be used without exchange server?