(Answer) (Category) PRW.NET FAQ's : (Category) Virus Control :
I received a message indicating that "<>" sent me a virus. How can I find the real sender ?
Some email viruses are sent with incomplete sender information. Those anonymous viruses generally propagate by sending messages with the virus to all email addresses listed on the address book of the contaminated system. If you are receiving a virus notification message listing "<>" as the sender, it probably came from a system that has your email on his/her address book and is propagating anonymously. One common virus that follows this pattern is the Snowhite (Hybris) worm.

On anonymous email viruses the only information available from the sender is the IP address and timestamp used by the system originating the message. Our mail servers block the virus so it does not propagate within our network. Yet in most cases it is not feasible to identify the sender without a detailed investigation. If the message originated outside our network we would need the cooperation of the ISP handling that connection which in many cases is not available.
2002-Nov-08 9:49am
Previous: (Answer) I received a notification that my system is sending a virus via email. Why does my antivirus report no viruses ?
Next: (Answer) Can you help me remove viruses from my system ?
This document is: http://www.prw.net/cgi-bin/fom?file=88
[Search] [Appearance]
This is a Faq-O-Matic 2.721.

Please send any suggestions, comments or problem reports to our webmaster
(C) 1999-2007 PR WebMasters