I'm not sure how he does that, but he takes all the routing information, that you don't see on a e-mail and finds the orginal ip and service provider. {My Norton software can trace attacks like Trojan Horses and even come up with the personal address of the attackers, sometimes.} I don't know everything he does, that's why I pay him

I had this guy that worked for me 18 years ago send me treatening things. Turned out he is now in a motorcycle gang in Texas, but anyway I found out all about him. So it can be done.

I lost some computers to virus a few years so I make it a point to learn and do everything I can to prevent it. It just really ruins your day when that happens.