Author: Bill Otten" <res0958z@verizon.net (Bill Otten)
Date: Fri, 26 Apr 2002 21:23:31 -0400
With all the discussion on the W32 Klez virii around, there was a suggestion to read the headers in order to see where a post might have come from. I don't know how to read through all this hieroglyp
MY guess would be that this is the actual infected computer: Since your "real" address is: res0958z@verizon.net, and I presume that this was alleged to have been sent by you? As I said, that is just
Bill: Supposedly the ISP people can track it with all that gibberish. I know the U.S. Secret Service wants the "entire" message with the full header if you complain to them about one of those 411 Nig
Author: Bill Otten" <res0958z@verizon.net (Bill Otten)
Date: Fri, 26 Apr 2002 22:23:25 -0400
Hey David, Would you agree that there has been a recent rash of virus outbreaks of late and that from the inquiries to this reflector that it is also obvious that possibly, just possibly one of the r
This line shows that it originated from the IP address 68.64.226.171. $ host 68.64.226.171 Name: pa-steclge-u3-c4a-171.stcgpa.adelphia.net Address: 68.64.226.171 and a whois search for adelphia.net s
I just received a virus. The message said it came from Bonfred42 <Bonfred42@aol.com> when in fact it came from fbf@netutah.net with an IP address of 209.197.0.17 Arin Whois identifies this as Burgoyn
Just one other thing -- this virus, as well as other ones most popular currently, DO NOT get their victims or their fake "From:" addresses from anyone's address book -- instead, they are snagged from
Go to http://www.arin.net/whois/index.html and type in the IP address of the computer you think actually sent the message, click and you'll have it. 73 Stu