Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

tracking or stopping w32.sobig.a virus

Status
Not open for further replies.

stinkybee

Programmer
May 15, 2001
218
GB
My virus protection software keeps detecting the w32.sobig.a@mm virus coming thorugh with my email. I am getting it several times each time I check for email, is there a way to track who is sending it or a way of blocking it coming through in the first place?
 
take a look at the email's header: it should show the IP address of the sender.

you can then use a reverse dns tool to identify the offender (probably an innocent infected victim).

you may find the reverse dns gives you an obvious address to email to notify the machine's owner of the problem, alternatively notify the ISP.

depending on how your email (and email server) is configured, you may be able to set a rule to ignore mail from IP address x.x.x.x


<marc> i wonder what will happen if i press this...[pc][ul][li]please give feedback on what works / what doesn't[/li][li]need some help? how to get a better answer: faq581-3339[/li][/ul]
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top