Number of attempted viruses I have caught since November 29, 2001 (just over a year ago):
220!!!!
Note the following tip, which, depending on the virus/worm, and depending on the ISP used as the intermediary, you *MAY* be able to determine which L-User has the offending infection.
Read the complete internet headers: (these are ususally hidden by default in most email programs.
For Outlook Express:
- Open the infected message (*NOT* the attachment)
- Click FILE (on the menu bar at top)
- Click PROPERTIES
- Click the DETAILS tab
- Look at the nerd-data (see below)
For Outlook 2000/XP
- Open the infected message (*NOT* the attachment)
- Click VIEW (on the menu bar at top)
- Click OPTIONS...
- Look at the Internet Headers... section
- Look at the nerd-data (see below)
Understanding the nerspeak:
It will look something like this (below). The main portion of interest is X-Apparently-From:
If present, this may tell you where the email actually originated.
Return-Path: <[email protected]>
Delivered-To: jehovahswitnesses.com%[email protected]
Received: (cpmta 8195 invoked from network); 15 Dec 2002 18:05:57 -0800
Received: from 64.12.138.9 (HELO rly-ip05.mx.aol.com)
by smtp.c000.snv.cp.net (209.228.32.87) with SMTP; 15 Dec 2002 18:05:57 -0800
X-Received: 16 Dec 2002 02:05:57 GMT
Received: from logs-wo.proxy.aol.com (logs-wo.proxy.aol.com [205.188.200.6]) by rly-ip05.mx.aol.com (v89.10) with ESMTP id RELAYIN2-1215210534; Sun, 15 Dec 2002 21:05:34 1900
Received: from Iwygk (AC85C226.ipt.aol.com [172.133.194.38])
by logs-wo.proxy.aol.com (8.10.0/8.10.0) with SMTP id gBG16C6398177
for <[email protected]>; Sun, 15 Dec 2002 20:06:15 -0500 (EST)
Date: Sun, 15 Dec 2002 20:06:15 -0500 (EST)
Message-Id: <[email protected]>
From: stri67 <[email protected]>
To: [email protected]
Subject: Happy Christmas
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=H2v7p8i7093290NYv3b9N
Return-Path: <[email protected]>
Delivered-To: jehovahswitnesses.com%[email protected]
Received: (cpmta 8195 invoked from network); 15 Dec 2002 18:05:57 -0800
Received: from 64.12.138.9 (HELO rly-ip05.mx.aol.com)
by smtp.c000.snv.cp.net (209.228.32.87) with SMTP; 15 Dec 2002 18:05:57 -0800
X-Received: 16 Dec 2002 02:05:57 GMT
Received: from logs-wo.proxy.aol.com (logs-wo.proxy.aol.com [205.188.200.6]) by rly-ip05.mx.aol.com (v89.10) with ESMTP id RELAYIN2-1215210534; Sun, 15 Dec 2002 21:05:34 1900
Received: from Iwygk (AC85C226.ipt.aol.com [172.133.194.38])
by logs-wo.proxy.aol.com (8.10.0/8.10.0) with SMTP id gBG16C6398177
for <[email protected]>; Sun, 15 Dec 2002 20:06:15 -0500 (EST)
Date: Sun, 15 Dec 2002 20:06:15 -0500 (EST)
Message-Id: <[email protected]>
From: stri67 <[email protected]>
To: [email protected]
Subject: Happy Christmas
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=H2v7p8i7093290NYv3b9N
X-Apparently-From: [email protected]
Status: U
X-UIDL: Pf01BtHkIFcgCQE
Edited by - Quotes on 15 December 2002 21:46:54