Don't beat me, but i've noticed a huge influx of these .pif virii today.

Tue Aug 19 20:27:03 UTC 2003

Drew,
You're not seeing things.  I would say you can thank "W32/Sobig.F-mm",
referenced in http://news.com.com/2100-1002_3-5065494.html.

Allow me to quote a bit from the story:

[quote]
The sender appears to be someone from a recognized domain name, such as
ibm.com, zdnet.com or microsoft.com. The subject line typically says
"Re: Details," "Resume" or "Thank you." 

Attachment names may include: your_document.pif, details.pif,
your_details.pif, thank_you.pif, movie0045.pif, document_Fall.pif,
application.pif, and document_9446.pif. 
[/quote]

Regards,
Jade

On Tue, 2003-08-19 at 15:33, Drew Weaver wrote:
>             Don't kill me for posting this, it may be slightly off
> topic but I have noticed a very odd spike in traffic with these virii
> that have .pifs attached to them. 
> 
>  
> 
> The subject is random.
> 
>  
> 
> The body always says:
> 
>  
> 
> "See attached file for details" and they're always a pif file.
> 
>  
> 
> Anyone else notice this?
> 
>  
> 
> -Drew
> 
>  
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20030819/38a98edc/attachment.sig>