Re: Help! No idea how they did that!

From: Thor Kottelin (thor_at_anta.net)
Date: 07/12/04


Date: Mon, 12 Jul 2004 10:28:37 +0300


David wrote:
>
> Today I received nearly 20 e-mails with the same attachement
> (Thyda.jpg) and body (Dear Everybody can i infect in ur
> machine???????????????? See U Next Time). I noticed one of them has
> the same From: address as mine.

> 1. How they did that?

They wrote a "From:" line with your address in it, just like you presumably
do yourself.

> 2. I couldn't track their IP. How can I track them?

Look at the "Received:" lines.

> 3. How can I stop them

Generally speaking, you can't. Their provider might kick them out, but there
are always bulletproof providers around.

Thor

-- 
http://www.anta.net/