The "Snowhite" message and the file attachment indicate that the sender's
PC is infected by the Hybris Worm. You'll find a "BCPL.NET News" message
about Hybris that I sent out to all my Internet customers a while back at
the following URL: http://www.bcpl.net/news/news.20010205a.hybris . It
contains links to additional info if you want more.
How are you trying to filter for it? If you're filtering based on the
"From:" address it may not work because despite what you see on the
"From:" line (Hahaha <hahaha@sexyfun.net>), the so-called "envelope From"
is empty in the Snowhite messages. Try filtering by "Subject:", which is
always "Snowhite and the Seven Dwarfs - The REAL story!". That may or may
not work, depending on the filtering capabilities of your mail program.
On Thu, 24 May 2001, Bullwinkle wrote to mgs and mgt:
> Virus?
>
> Twice now I've gotten the following message: two days ago and
> just now. I've trashed both of them. I thought I had my mail
> filter setup to block it after the first episode. Attached is a
> file called dwarf4you.exe. which I also trashed. Is this a
> virus?
>
> Bullwinkle
>
> <<<snip>>>
> Subject:
> Snowhite and the Seven Dwarfs - The REAL story!
> Date:
> Thu, 24 May 2001 18:22:47 -0400 (EDT)
> From:
> Hahaha <hahaha@sexyfun.net>
>
>
>
>
> Today, Snowhite was turning 18. The 7 Dwarfs always where very
> educated and
> polite with Snowhite. When they go out work at mornign, they
> promissed a
> *huge* surprise. Snowhite was anxious. Suddlently, the door open,
> and the
> Seven
> Dwarfs enter...
--
Chip Old (Francis E. Old) E-Mail: fold@bcpl.net
Manager, BCPL Network Services Voice: 410-887-6180
Manager, BCPL.NET Internet Services FAX: 410-887-2091
320 York Road
Towson, Maryland 21204-5179 U.S.A.
///
/// mg-t@autox.team.net mailing list
///
|