Track IP address of virus sender's system

You can use a tool like Sam Spade to "help" you find the source of the infected item by parsing e-mail headers and performing Who is lookups on the source IP addresses.

The bad news is that it will usually lead to a dead end (unregistered block of IP addresses) or a zombie (Grandpa's unprotected and severely infected machine). Not to say that work won't pay off at all, because now you can filter all mail coming from that IP address. But, you know the downside -- there are bad people that aren't directly involved with these bots. And there are plenty more zombies for the bots to use.

I think as long as you are going to stay connected to the Internet you have to consistently ask yourself: How can I do a better job of preventing the viruses I'm receiving from infecting me?

---

Do you have comments on this Ask the Expert Q&A? Let us know.

---

Related information from SearchExchange.com:

Peer Advice: Antivirus programs -- which one do you prefer?

Free Download: EICAR's Antivirus Test File

Resource Center: Virus Protection tips and resources

---