wirusy od vectra – 95.160.74.65

Uwaga na wirusy  z vectra.pl IP: 95.160.74.65.

Od ładnych paru tygodni dostajemy z IP 95.160.74.65 wirusa mailem. Niestety mój mail do adminów vectry został zignorowany. Dlatego jestem zmuszony zablokować vectre. Jeśli ktoś ma internet od vectry to niech nie liczy, że e-mial dojdzie do uczelni. Poniżej whois i raport antywirusa.

WHOIS:

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: This output has been filtered.
%       To receive output for a database update, use the „-B” flag.

% Information related to '95.160.0.0 – 95.160.255.255′

inetnum:        95.160.0.0 – 95.160.255.255
org:            ORG-TKDS1-RIPE
netname:        PL-DAMINET-20081222
descr:          VECTRA TECHNOLOGIE S.A.
country:        PL
admin-c:        mz805-ripe
tech-c:         VTSA1-RIPE
tech-c:         KG733-RIPE
status:         ALLOCATED PA
mnt-by:         RIPE-NCC-HM-MNT
mnt-lower:      DAMINET
mnt-domains:    VECTRANET-MNT
mnt-routes:     DAMINET
source:         RIPE # Filtered

organisation:   ORG-TKDS1-RIPE
org-name:       VECTRA TECHNOLOGIE S.A.
org-type:       LIR
address:        VECTRA TECHNOLOGIE S.A.
                Marcin Zwierzchowski
                Al. Zwyciêstwa 253
                81-525 Gdynia
                Poland
phone:          +48 48 3690712
fax-no:         +48 48 3690731
e-mail:         lir@dami.com.pl
admin-c:        VTSA1-RIPE
admin-c:        KG733-RIPE
admin-c:        MZ805-RIPE
mnt-ref:        DAMINET
mnt-ref:        RIPE-NCC-HM-MNT
mnt-by:         RIPE-NCC-HM-MNT
source:         RIPE # Filtered

person:         Marcin Zwierzchowski
address:        Vectra S.A.
address:        Al. Zwyciestwa 253
address:        81-525 Gdynia
address:        POLAND
phone:          +48 58 6248352
e-mail:         m.zwierzchowski@vectra.pl
nic-hdl:        MZ805-RIPE
mnt-by:         VECTRANET-MNT
source:         RIPE # Filtered

person:         KAROL GORALSKI
address:        Vectra S.A.
                Al. Zwyciestwa 253
                81-525 Gdynia
phone:          +48 58 6248352
e-mail:         k.goralski@vectra.pl
nic-hdl:        KG733-RIPE
mnt-by:         VECTRANET-MNT
source:         RIPE # Filtered

person:         Krzysztof Kawalerski
address:        Vectra  S.A.
address:        Al. Zwyciestwa 253
address:        81-525 Gdynia
address:        POLAND
phone:          +48 89 6781999
e-mail:         k.kawalerski@vectra.pl
nic-hdl:        VTSA1-RIPE
mnt-by:         VECTRANET-MNT
source:         RIPE # Filtered

% Information related to '95.160.72.0/22AS29314′

route:          95.160.72.0/22
descr:          -= KIELCE =-
descr:          For abuse: abuse@vectranet.pl
origin:         AS29314
mnt-by:         VECTRANET-MNT
source:         RIPE # Filtered

————————————————————————————————————

A virus was found: Trojan.Buzus-1769

Banned name: multipart/mixed | application/octet-stream,.zip,postcard.zip |
  .exe,.exe-ms,postcard.exe
Scanner detecting a virus: ClamAV-clamd

Content type: Virus (9,)
Internal reference code for the message is 14545-06/lWlaEOxbHYb4

First upstream SMTP client IP address: [95.160.74.65]
  095160074065.kielce.vectranet.pl
According to a 'Received:' trace, the message originated at: [95.160.74.65],
  hallmark.com 095160074065.kielce.vectranet.pl [95.160.74.65]

Return-Path: <a class="moz-txt-link-rfc2396E" href="mailto:postcards@hallmark.com"><postcards@hallmark.com></a>
Message-ID: <a class="moz-txt-link-rfc2396E" href="mailto:20100214154254.AF5957B1BA@wseip.edu.pl"><20100214154254.AF5957B1BA@wseip.edu.pl></a>
Subject: You've received A Hallmark E-Card!
The message has been quarantined as: virus-lWlaEOxbHYb4

Notification to sender will not be mailed.