If you're right, then it appears that it might be coming through an isp in Georgia. That ip address is part of a block that belongs to an outfit in Atlanta (US Wireless Online).
Familiar to anybody?
Alan
>>>If your computer is named WSLEXSECO04, you're infected with SoBig.F. Please clean it up and stop dumping dozens of messages in hundreds (?) of mailboxes.
>>>
>>>Tamar
>>
>>In addition to instructing us what to do, why not inform us how you know this and maybe give a little background on it?
>
>Since Tuesday, I've received probably close to 100 copies of the sobig.f virus. I've inspected the email headers of a bunch of the copies (in Outlook, right-click and choose Options), and it appears that all of the ones I received have come from two sources. One of them has apparently been cleaned up, since I haven't received anything from that one since Tuesday.
>
>The other one, from which I've recieved viruses as recently as this morning, appears to have a number of Fox community members in the address book, including people I've never encountered anywhere but the UT (thus my posting the message here), as the From line. The header includes the following:
>
>Received: from WSLEXSECO04 (64-112-130-198.user.uswo.net [64.112.130.198])
>
>
>Tamar
Previous
Reply
View the map of this thread
View the map of this thread starting from this message only
View all messages of this thread
View all messages of this thread starting from this message only