Anything can be faked, ever heard about "remailers"? That is a server
thatstrips the real IP
from header and sends the mail further. Excellent for people that are
living in dictatorship
countries like China, USA or EU, that want to send their opinion to
newsgroups or mailing
lists.
They usualy can also hack into WLAN of innocent people, and use their IP
to make some
idiotic or illegal moves.
So even if the IP in header cannot be faked, it is not sure that the
attack comes really from
the person that subscribed the IP.
And finally, viruses send themself without the knowledge of the users.
The user is just too
stupid to own a PC, if he opens each attachement or has no firewall...
Greetings to all
LCD
Aley Keprt wrote:
I usually get lots of SPAM, but no viruses. As several Sam users already
mentioned, I use a simple whitelist system to block 100% of SPAM, and allow
only known addresses. But this can't currently block viruses.
Unfortunatelly...
btw. You can find who sent you viruses. Although the sender e-mail address
is faked, there is a valid IP address (can't be effectively faked), and with
cooperation of its internet service provider, you can find the real
computer. (If you have got some luck. :-)
/---
Aley
----------------------------------------------------------
Mgr.(MSc.) Ales Keprt (also known as Aley)
[EMAIL PROTECTED] *** www.keprt.cz *** ICQ: 82357182
Dept. of Computer Science, VSB Technical University
Ostrava, CZ - [EMAIL PROTECTED] - www.cs.vsb.cz
----------------------------------------------------------
----- Original Message -----
From: "Matthew J. Craven" <[EMAIL PROTECTED]>
To: <sam-users@nvg.ntnu.no>
Sent: Monday, April 05, 2004 7:11 PM
Subject: Re: Virus Madness!!! - Can somebody help?
I have at least 30 a day with all kinds of viruses like the ones you
mention. I don't know if it's anything to do with the sam-users list
though.
I receive them from all over the world, and yes, the addresses are
normally faked.
But it's beginning to drive me to the point of distraction as well...
God, I want to wring their pathetic little necks! :-D
--Matt.
On 5 Apr 04, at 18:54, Aley Keprt wrote:
Hello friends,
this is what I can the virus madness! In last fortnight I got over 50
e-mails with viruses Netsky.B and Netsky.Q. Is this normal? I think
and hope it isn't. In recent 12 hours I got 6 new e-mails with
Netsky.Q. This is absolutely unbelievable. I looked to the e-mail
headers, and I can see the sender is always the same. Really
unbelievable. The e-mail address of the sender is not visible (it is
faked), but I have got the IP address. I write it below, so you all
can check, if it is somewhat connected with sam-users. It is an
address in Netherlands, and my only contact to Netherlands is via
sam-users.
Computer name: node-d-1d4e.a2000.nl
IP number: 62.195.29.78
Provider: UPC Netherlands
Is this a private computer, or a multiuser node/proxy? Can somebody
help?
And does anybody receive such viruses by e-mail as well (in recent few
days)?
/---
Aley
