Beware "Snow white" emails

bugler

If you get an email about snow white etc and it has an attachment,then delete it at once.This is the carrier of the Hybris Virus.

Lex_Diamonds

I got that email and was about to run the .exe when I thought, "I think I may as well scan it." and low and behold! Phew!

Lord Khan

thread about it under security

TwoShedsJackson

In fairness you'd have to be a bit daft to run an .exe that you got with an unsolicited email.

tmcd

If you reply to the e-mail you get an auto return e-mail telling you all about the virus and how not to receive it again. I havn't worked that part out yet, I probably get the snow white e-mail every second day for the last six months now. Looks like im stuck with her for life....The delete botton works great.

bugler

<font face="Verdana, Arial" size="2">Originally posted by tmcd:
I probably get the snow white e-mail every second day for the last six months now. Looks like im stuck with her for life....The delete botton works great. </font>

Holy sh*t! that often?

Lord Khan

I get it and the ILOVEYOU several times daily
because I'm in a uni and we have a command address book for all students

po0k

I got that snowwhite thing a while back....
it was an .scr file from what i remember......
thought it waas ascreensaver or something.......
hehe.........
reformat time......

sutty

At this point in time I would liked to say.......YAY!!! for mail sweeper. It blockes it a treat. and YAY for Admining it too. I'v seen it cought in the sweeper a few times, lucky I heard about it off one of the other system Admins

---

Ciaran Sutcliffe
aka: sutty
[HIV]sutty
For a good time goto:
http://www.hotinternetvirgins.com

davoc

ive gotten snow white a good few times now aswell, 4 times in the last month or so.
bloody annoying it is.
its fine so long as you dont open it of course, but my bro was just home for easter and the baastard almost clicked, only i was right beside him phew.
must try that replying to it, see if i can stop it

[This message has been edited by davoc (edited 26-04-2001).]

bugler

How is it distributed anyway? Its just the address I got it at would not be in many peoples addy books....I dunno how it found its way to me.

Snowbat

<font face="Verdana, Arial" size="2">Originally posted by bugler:
How is it distributed anyway? Its just the address I got it at would not be in many peoples addy books....I dunno how it found its way to me.</font>

It hooks into Winsock, monitors traffic, and fires off a copy of the Snow White mail to anything that looks like an email address.

http://www.symantec.com/avcenter/venc/data/w95.hybris.gen.html

The domain "sexyfun.net" did not exist when this virus started spreading - hahaha@sexyfun.net was a fake address. Volunteers have since registered the domain and set up servers in an effort to stop the spread of the virus.
http://www.sexyfun.net/