Re: Changed UserId and 50 Hours Later Swen is Back--Summary

From: Veronica Loell (lista-nospam_at_nakawe.se)
Date: 10/23/03 

Date: Thu, 23 Oct 2003 14:53:32 +0200

Wayne Watson wrote:
> I'm going to ruminate on this for a few days, and see what I can discover. Likely
> I will ask all 10 to remove me from their books. I will also start another
> address that is pretty funky, and no one is likely to guess. No one will get this
> address, and I will prowl web sites with it.
>

Have you analysed the swen-messages for the originating IP-adress? That
would be my first move in order to track down the source of the infection.
You will not be able to find out the actual computer that sent the
messages but you will be able to find the ISP. That should narrow things
down a bit.

- Veronica

Relevant Pages