hi , my pc is not infected i have checked my question is, im getting around 2000 messages a day from 2 ip addresses (spoofed sender addresses though) that have this virus attached. What are my options to block these emails. Is there a way i can connect to these ip addresses and leave a message. thanks nachos

You can set a filter to permanently delete the message if the header contains that IP address. What'd I'd recommend though is to determine the originating Domain/ISP, and can contact them with the information. I did this with an Adelphia machine that was continually sending infected messages. Adelphia disabled the IP address for that user until the machine had been cleaned.

thanks for the reply i have contacted both service providers that are linked to the ip addresses Dont know how long it takes them to react, in the meantime... I use outlook express, can this program block mail from certain ip addresses?

okay, I've run the removal tool from Symantec two times, both times I'm told that the virus was not found. Yet everytime I either turn on my computer, or open Outlook my Symantec Corporate Server 9.0.2.1000 version puts up a window that the worm is in the system restore files. now, mind you, I have run the Symantec Corp. version since I bought this computer just a month ago. somehow I think this worm has been altered by someone and it is now not responding to the 2 year old removal tool. any suggestions, email me please Thanks Cal No good deed goes unpunished. ~ Johnny Carson

What OS are you running? Must be either ME or XP if you have a Restore folder. You need to make sure that System Restore is disabled before you run the fix. Then, reinstall Live Update and scan the computer. Only after you've done all that should you re-enable System Restore.

Thank you Jennifer, it worked. No good deed goes unpunished. ~ Johnny Carson

hijack my thread CalRMII!? learn some manners eh