How can I determine who keeps sending me the hahaha virus ?

[Doomer]

I've gotten 3 of these this weekend. Anybody know how to determine where they are coming from ?

Thanx

 

[OZEE]

I'm not finding anything about hahaha, but I did find info about ha virus at McAfee.com. If that's what you've got, it's old enough (found in '92) that ANY virus scanner should be able to take care of it, as long as you're not reinfecting yourself with a floppy/zip/backup.

Post some more details about the bug and maybe we can get you more specific help.

Good luck

 

[Doomer]

From : HaHaHa

Subject : Snow White and the Seven Dwarfs - The Real Story!

Attachment : Midgets.scr

No, I haven't opened the attachment so I'm not infected. I'd just like to know who is sending this to me so I can warn them that they are infected.

Thanx

 

[aimn]

I used to get the same emails. I never openned them, finally, after about 3 months of sending them to me they quit. Losers, get a life.

 

[DARRIN]

Can you right click on the email and go to properties then details. It should tell you where it came from as well as their IP address. You could block the sender but you would have to open the email first. If it an easy virus to get rid of - open the mail, click on message at the top, the click on block sender. Then get rid of your virus. Of course this will only work if it is coming from the same sender each time. Hope this helps.

 

[Staver]

Go Here. You can set up a free account and track where any mail comes from and file an abuse report. I use it to report spammers.

 

[OZEE]

Yup, like everybody else says ... right click, get their properties. Although it's likely it'll be like spam - a temporary, bogus address. If it's a pop-type address (not web-based mail) you could also possibly let the isp know (support@[insert isp name here]) and they could look up a local contact.

dunno, it's just a thought

 

[Strafe]

It's not a spammer, someone who has you in their address book has a virus. You could check the email header for some cluse but I think it spoofs the address.

http://www.symantec.com/avcenter/venc/data/w95.hybris.gen.html

W95.Hybris is a worm that spreads by email as an attachment to outgoing email messages.

The email message or subject may include, but is not limited to:


hahaha@sexyfun.net
Snow White and the Seven dwarves


The attachment may have one of several different names, including, but not limited to:

anpo porn(.scr
atchim.exe
branca de neve.scr
dunga.scr
dwarf4you.exe
enano porno.exe
joke.exe
midgets.scr
sexy virgin.scr

 

[metallibloke]

Where I used to work, someone was using our mail server as a relay to send this virus out to people. We'd get emails from angry people saying that someone from our company had sent them 100 or so copies of the same email. We knew no one from our company had done it, and my boss traced it through our firewall, so just be a little careful about sending nasty emails to the person it says you received it from, they maybe innocent.