Martijn
05-22-2008, 03:11 AM
I woke up this morning and noticed I was disconnected from the net by my ISP. They told me too look in my mailbox for more details. This is what they sent me:
Official warning for distributing wormviruses by ip xxx.xxx.xxx.xxx
Dear customer,
In response to complaints we recieved, we have temporarily disabled your internet service. We noticed your IP to be distributing wormviruses over the internet. Logs this, traffic that, blah blah blah.
You will have to remove the worm by downloading a virusscanner. Blah blah blah.
We also suggest using a firewall. Blah blah blah.
If we notice you are still distributing wormviruses in 24 hours, we will have to take action by disabling your service until you have solved your (notice that word) problems. Blah blah blah.
Sincerely,
Telfort Internet Abuse
So I sent them this reply:
Dear Sir/Madam,
This email was in my mailbox when I woke up. Of course I did a virus scan on all of my machines, but none of them were infected. I use McAfee 8.5 Corporate with the latest updates installed.
I would like to know why I got this email. Is it possible that you send me the log files in question so I can examine them myself? I run various distributed computing programs, a webserver and a gameserver. It could be that one of these programs is causing trouble.
If you cannot confirm the source of the problem, I will consider this email illegitimate. I am willing to 'limit' my internet usage, but I would like to know the source of the problem, for I cannot take action otherwise. I am looking forward to a response.
Have a nice day,
Martijn Kruit
N.B.
Wormviruses do not exist. It is either a worm or a virus, not both. Worms do not need files to distribute themselves, unlike virusses. Also, worms mostly infect networks, whereas viruses infect software.
Could MJ12 be the source of the problem? I mean, it is constantly downloading various IPs, then sending data back to a server?
Official warning for distributing wormviruses by ip xxx.xxx.xxx.xxx
Dear customer,
In response to complaints we recieved, we have temporarily disabled your internet service. We noticed your IP to be distributing wormviruses over the internet. Logs this, traffic that, blah blah blah.
You will have to remove the worm by downloading a virusscanner. Blah blah blah.
We also suggest using a firewall. Blah blah blah.
If we notice you are still distributing wormviruses in 24 hours, we will have to take action by disabling your service until you have solved your (notice that word) problems. Blah blah blah.
Sincerely,
Telfort Internet Abuse
So I sent them this reply:
Dear Sir/Madam,
This email was in my mailbox when I woke up. Of course I did a virus scan on all of my machines, but none of them were infected. I use McAfee 8.5 Corporate with the latest updates installed.
I would like to know why I got this email. Is it possible that you send me the log files in question so I can examine them myself? I run various distributed computing programs, a webserver and a gameserver. It could be that one of these programs is causing trouble.
If you cannot confirm the source of the problem, I will consider this email illegitimate. I am willing to 'limit' my internet usage, but I would like to know the source of the problem, for I cannot take action otherwise. I am looking forward to a response.
Have a nice day,
Martijn Kruit
N.B.
Wormviruses do not exist. It is either a worm or a virus, not both. Worms do not need files to distribute themselves, unlike virusses. Also, worms mostly infect networks, whereas viruses infect software.
Could MJ12 be the source of the problem? I mean, it is constantly downloading various IPs, then sending data back to a server?