On Fri, 27 Jul 2001 02:53:43 -0400 (EDT), Thomas Mueller wrote:
>> yea...damn...I get this email like 10 times a
>> week...everyone seems to have it...its the one with
>> "this document requires your opinion" or something
>> right? with a document.doc.lnk or something similar
>> as an attachment?
>> it's getting on my nerves! ive got all the phrases it
>> uses blocked.
>> - W0rm
> I haven't seen this virus, or at least I don't recognize it from the
> description.
I just got it. :(
It was disguised as "T E L E F A X M E S S A G E.doc.pif"
(was saved by insight/Arachne into l:\arachne\cache\t_e_l_e_.")
[no file extension]
It did no damage to *my* system because....
---This program must be run under Win32
_______________
> - --- Clarence Verge <[EMAIL PROTECTED]> wrote:
>> Hi All;
>> I have now had the Hybris worm delivered to my
>> arachne mailbox three
>> times in the last week. The last seems to have
>> originated in CZland.
>> After doing a little research it appears to me that
>> this worm only
>> propogates to email addresses which already exist in
>> someone's address
>> book. There is a vague possibility that it can
>> acquire the addresses
>> from html pages downloaded while surfing, but this
>> seems less likely.
>> So may I suggest that any Win9+ users that happen to
>> have the address:
>> [EMAIL PROTECTED] in their address book please scan
>> their systems for
>> the Hybris worm ?
>> Thanks to all, and sorry for any false alarm.
>> p.s. They have all had different filenames, but the
>> files were identical.
> I've received a lot of Snowhite messages, I think that's the Hybris virus. But
> the attachments are not all the same size. I recently got one about 6 KB bigger
> than most of the others (dwarf4you.exe).
--
Glenn
http://arachne.cz/
http://freedos-32.sourceforge.net/
http://www.delorie.com/listserv/mime/
http://www.angelfire.com/id/glenndoom/download.htm
