Ziay Chat Forums

Ziay!

General Discussion Forum

Is there a way to identify which of your computers is infected by a virus or...

This is a discussion on Is there a way to identify which of your computers is infected by a virus or... within the General Chat forums, part of the Main Category category; ...trojan horse and sends spam? Let's say you've got several PCs and don't want to immediately check ...





Go Back   Ziay Chat Forums > Main Category > General Chat

FAQ Members List Mark Forums Read
Old 07-09-2008, 10:03 PM   #1
Junior Member
 
Join Date: Jun 2008
Posts: 2

...trojan horse and sends spam? Let's say you've got several PCs and don't want to immediately check all of them manually, is there a way to 'remotely' trace down which one might be the one that's infected and used to send spam?
Soulhunter is offline   Reply With Quote
Old 07-09-2008, 10:05 PM   #2
Junior Member
 
Join Date: Jul 2008
Posts: 1
Default

If you have a firewall, you can set it up to log or prevent SMTP altogether. You can then look at the log and figure out IP address of sender.
It should be possible to do with WinXP SP2 firewall and other software based firewalls too.
SMTP is port 25.
Ron V is offline   Reply With Quote
Old 07-09-2008, 10:06 PM   #3
Junior Member
 
Join Date: May 2008
Posts: 3
Default

If the computers are in a local network, you can run a packet sniffer such as Ethereal http://www.ethereal.com/ and see what is going on.
aditsu is offline   Reply With Quote
Old 07-09-2008, 10:24 PM   #4
Junior Member
 
Join Date: Jul 2008
Posts: 1
Default

if you have a copy of the spam look at the header information, it should have information on the computer that was used to send it, the net name, local IP address ,ect, send a copy of it to: paul@pdcsolutions.co.uk

and i will try to help you
Paul_Norwich is offline   Reply With Quote

Powered by vBulletin® Version 3.7.1