So, I received a letter from Virginmedia a few weeks ago to say I'm sending spam (A device using your internet may be infected with malware) Since then I've bought a new PC and installed Norton360 on all devices (new W10 PC, W10 laptop, 2 iPads, 3 iPhones). I also followed Ravenstar68's excellent post on these pages using a redundant netbook. Nothing has been spotted by the netbook or by Norton. This morning I received another letter saying I'm still sending spam. In addition to the above devices there is a work laptop and work iPad which have their own anti-virus software installed. There is also a DVR (security camera server) which is probably unix based. I am at a loss why Virginmedia say I'm still sending spam and I'm looking for ideas at what else I can do. I'd also like to know if vm are basing their accusation on my IP or email addresses.
Hi, thanks for reply. Wireshark was setup to monitor port 25, I don't know if there was an additional requirement in Ravenstar68's post to setup a filter to capture telnet. I removed the netbook monitor after about two weeks of no captures. All devices, except the DVR and a network printer, connected via wifi. I don't use Hola VPN, but since installing Norton360 I use their VPN.
I remember now you mention it I did run the telnet command on the PC and it was captured on the netbook. I'm setting it all up and will go through it all again. On a previous notification from vm a couple of years ago I rang them (they provided a number in those days) and the agent admitted the problem was probably not caused by me but it was on their servers. There's no number to ring now and instead they point you to this forum for advice.
Having confirmed that Wireshark was previously set correctly and with nothing to suggest anything was amiss it might be best to look at the devices that could not be scanned to confirm they are not the source.