On Fri, Dec 26, 2003 at 06:44:18PM -0800, rhonn tabanao enlightened us thusly > Here's one file I received..
There's qall sorts of failures and return paths there. It's definitely a virus. .pif files are executable in windows you know. Trying to weed through the crud I came out with the IP 81.77.133.6 as the IP it was received from. I am sure sharper eyes than mine will scan it also. Here's the whois entry. Forward the entire thing to the abuse@ email. They can isolate who had the IP at that time, and consequently, who started it. dec:~$whois 81.77.133.6 % This is the RIPE Whois server. % The objects are in RPSL format. % % Rights restricted by copyright. % See http://www.ripe.net/ripencc/pub-services/db/copyright.html inetnum: 81.77.128.0 - 81.77.255.255 netname: E2-DSL-1 descr: Energis UK descr: DSL Customers country: GB admin-c: MADM1-RIPE tech-c: MADM1-RIPE status: ASSIGNED PA mnt-by: ENERGIS-MNT changed: [EMAIL PROTECTED] 20030106 changed: [EMAIL PROTECTED] 20031202 source: RIPE route: 81.76.0.0/15 descr: Energis UK origin: AS5388 mnt-by: ENERGIS-MNT changed: [EMAIL PROTECTED] 20031218 source: RIPE role: Modem and DSL Team address: Energis UK address: Melbourne Street address: Leeds, LS2 7PS address: United Kingdom phone: +44 113 2345100 e-mail: [EMAIL PROTECTED] admin-c: ENIT1-RIPE tech-c: ENIT1-RIPE nic-hdl: MADM1-RIPE remarks: Abuse reports to [EMAIL PROTECTED] please! remarks: No actions are taken on abuse reports sent to modem team. mnt-by: ENERGIS-MNT changed: [EMAIL PROTECTED] 20021127 source: RIPE -- With best Regards, Declan Moriarty. -- Author: Declan Moriarty INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB CHIPDIR-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
