nanog mailing list archives
Re: Don't beat me, but i've noticed a huge influx of these .pif virii today.
From: "Jade E. Deane" <jade.deane () riven net>
Date: 19 Aug 2003 15:27:03 -0500
Drew, You're not seeing things. I would say you can thank "W32/Sobig.F-mm", referenced in http://news.com.com/2100-1002_3-5065494.html. Allow me to quote a bit from the story: [quote] The sender appears to be someone from a recognized domain name, such as ibm.com, zdnet.com or microsoft.com. The subject line typically says "Re: Details," "Resume" or "Thank you." Attachment names may include: your_document.pif, details.pif, your_details.pif, thank_you.pif, movie0045.pif, document_Fall.pif, application.pif, and document_9446.pif. [/quote] Regards, Jade On Tue, 2003-08-19 at 15:33, Drew Weaver wrote:
Don't kill me for posting this, it may be slightly off topic but I have noticed a very odd spike in traffic with these virii that have .pifs attached to them. The subject is random. The body always says: "See attached file for details" and they're always a pif file. Anyone else notice this? -Drew
Attachment:
signature.asc
Description: This is a digitally signed message part
Current thread:
- Don't beat me, but i've noticed a huge influx of these .pif virii today. Drew Weaver (Aug 19)
- Re: Don't beat me, but i've noticed a huge influx of these .pif virii today. Jade E. Deane (Aug 19)
- Re: Don't beat me, but i've noticed a huge influx of these .pif virii today. Henry Linneweh (Aug 19)
- Re: Don't beat me, but i've noticed a huge influx of these .pif virii today. Jack Bates (Aug 19)
- Re: Don't beat me, but i've noticed a huge influx of these .pif virii today. Jade E. Deane (Aug 19)