In order to protect Portland State University web servers from this potential damage, we have put measures in place to block access to our websites.
The Exploits Block List (XBL), maintained by Spamhaus, is a realtime database of IP addresses from hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Most IPs are listed as a result of directly sending spam or viruses to special spam detectors (spamtraps, special addresses which do not belong to any real users, and which receive only spam) or by initiating SMTP transactions that look similar to viruses or botnet-proxies. For more details about the types of systems listed see http://cbl.abuseat.org/ and http://www.njabl.org/faq.html.
The IP address listed in the Spamhaus XBL was 38.107.179.221. You can lookup the record in the xbl list at http://www.spamhaus.org/query/bl?ip=38.107.179.221
Under the line "38.107.179.221 is listed in the XBL", click on the links for CBL and NJABL (if they appear) to de-list the IP address from both lists underlying the XBL.
If the computer is still infected, Spamhaus will re-list the computer.