Fig

Every day for the past month or more I get 15-20 virus alerts with spoofed sender addresses, which all appear to originate from the same machine. The infected messages are being intercepted by Sophos so are not a threat as such. It looks like they are the same messages being sent again and again (I guess every time the unsuspecting (?) person switches their PC on) as the sender and recipients addresses are consistent and it is always the same virus (Bagle-AA)

The IP address in the header changes daily so I cannot block the IP address at the gateway. A tracert on the IP always traces back to the same point on the NTL network.

Any suggestions on what to do? can I alert the sender, report it to the ISP or otherwise put a stop to the messages, as they are becoming a complete pain.

Thanks

JackClark

You should report it to NTL, not sure how active they are in tracking down infected users though.

Fig

Done that now............. should I hold my breath waiting for a reply?

JackClark

No.