>My question is regarding the reported remote ip address - the ip address
>reported using the %remoteip% is that the actually ip address of the
>computer sending the virus or is that also forged by the virus?
The IP address cannot be forged by the virus, so it will always be correct.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
