On Sun, 28 Mar 2004, wayne wrote:
In <20040328190715(_dot_)41155DEA7(_at_)portent(_dot_)listbox(_dot_)com>
mengwong(_at_)dumbo(_dot_)pobox(_dot_)com writes:
i wait for a reply!
[attached zip file deleted]
Uh, I'm unable to deal with the data in the zip file because I don't
have any software that deals with .pif files on my linux box. (What
are .pif files anyway?)
Is this an email worm, or was this message really from Meng about the
SPF 'unknown' status? (The headers look like they came from
portent.listbox.com.... Uh, no, wait, 213.233.93.173 isn't
v2.listbox.com!)
.pif files are Microsoft screen files, which unfortunately get
automatically executed when discovered inside .zip files by certain
Microsoft mail tools (such as Outlook). The message is a worm, one of
the things SPF will help reduce the likelihood of by making email
sources more identifiable and rejecting the forged "From:" addresses.