**VIRUS WARNING**

Status
Not open for further replies.

MALC

Regular member
Joined
Aug 11, 2001
Messages
6,350
Just to warn everyone the SNOW WHITE e-mail virus is back again this time its titled HAHAHA dont open it just delete it

I've posted warning hear as its mainly anglers that e-mail myself and i know 2 others that have received it

MALC
 

Dave

Red Leader
Staff member
Site Supporter
Joined
Aug 8, 2001
Messages
62,228
Thanks Malc for the warning, there's more and more viruses being distributed than ever before.

Here is some bumf on the virus W95.Hybris.gen a.k.a. I-Worm. Hybris

The W95.Hybris.gen worm spreads itself via an email attachment posing as pornographic material. It sends itself using faked email headers so the from line always appears as:

From: Hahaha <hahaha@sexyfun.net>


If you receive any messages with the following subject lines delete them immediately:


-Snowhite and the Seven Dwarfs - The REAL story!

-Branca de Neve porn!

-Enanito si, pero con que pedazo!

-Les 7 coquir nains



or depending on the version of the virus some combination of:


Anna + sex

Raquel Darian sexy

Xena hot

Xuxa hottest

Suzete cum

famous cumshot

celebrity rape horny

leather ... e.t.c.



As always the best protection against attacks such as these is not to open messages or attachments from sources you do not trust, and to run (and keep up to date) antiviral software on a regular basis.



You can find more information about this virus at:

http://www.symantec.com/avcenter/venc/data/w95.hybris.gen.html

http://vil.nai.com/vil/virusMethodOfInfection.asp?virus_k=98873

http://www.avp.ch/avpve/worms/email/hybris.stm



If you do not currently have anti-virus software you can try the free, evaluation of McAfee virus scan available from
http://download.mcafee.com/eval/evaluate2.asp

or get a copy of AVG's free anti-virus software from here:
http://www.maggotdrowning.com/forum/topic.asp?ARCHIVE=&TOPIC_ID=119


Regards, Dave
 

MALC

Regular member
Joined
Aug 11, 2001
Messages
6,350
Hi Dave,
I learnt the hard way last time it done the rounds i opened it and it got me it took 2 days to clean my system.
Had mcfee on my system then but since switched to the AVG program.
Now anything with attachments i just delete straight away regardless.
MALC
 

Dave

Red Leader
Staff member
Site Supporter
Joined
Aug 8, 2001
Messages
62,228
Hi Malc,

The one thing with all Anti-Virus software is that it needs the 'Dat' files updating on a regular basis, ie monthly. Some have an option to enable a check for Heuristics which means anything that may resemble a virus whether known or not. I believe McAfee has this option built in.

To safely open an attachment, first create a new folder for example on your Desktop, (right click desktop, New > Folder then rename say attachments
With AVG (and most other Anti-virus software), in Outlook or Outlook Express if you click the attachment icon, select the Save Attachment and in Browse find the folder, right click the file and left click the option Scan with AVG or whatever your software title.

AOL will save an attachment to the default Download folder. Again right click the file and left click the option Scan with AVG or whatever your software title.

Like you say, the totally safe way is to delete them regardless but sometimes like I find, I receive a boatload of attachments, images, articles, bumf, etc which needs to be opened.

One that 'Got' me a little while back was an attachment 'SULFNBK.exe'.
Never open an attached file with the sffix .exe.
Having deleted the attachment, I checked the hard-drive of this PC and sure enough found the same file. Remembering a warning that went out a bit back regarding this file, I thought that the PC had been 'got' so before deleting it, a good ploy which is used often before deleting files is to rename them so they become ineffective >> right click file>rename>newname SULFNBK1.exe. This isolates the file, which I did this time.
A quick check with Symantec and it turns out the virus was a hoax and the file on the PC was part of the operating system so it was just a quick rename again.
The attachment was meant to overwrite the PC's file.

Read this:: http://www.symantec.com/avcenter/venc/data/sulfnbk.exe.warning.html

Otherwise it would have meant a fair bit of messing about to get the file back.

Worms are meant for catching fish icon_smile.gif and should only be used as such,

Dave
 

Trogg

the bouncer
Staff member
Site Supporter
Joined
Aug 11, 2001
Messages
27,768
Last time this did the rounds i checked out the url & found ut that the people who owned it had also tried to find the culprit & they are the ones who owned the website (they brought it to warn others of the virus(viri?))

If you don't have an AV prog running then you could be in deep poo poo
A lot of the viri? (what the hell do you call a collection of viruses??) attatch themselves to you re-mail address book & send themselves to your friends without your knowledge.(self reproducing hence the term virus)

For an on line virus scan check out this site http://www.antivirus.com/pc-cillin/ you don't have to register just click on the "scan without registering" bit.

As this is an online checker it is updated every hour so you can be sure if a new virus is found it will be on this site within an hour.

My Norton AV 2001 cost me 1:99 I got it of the front of a mag (no Dave not that sort) then i went to cracks.am & got the patch for it so i've now got the full program for 1:99 not bad eh?

Alan
insomnia is nothing to lose sleep over
 

Peter

'Mugger'
Staff member
Site Supporter
Joined
Sep 18, 2001
Messages
20,435
Thanks for the warning lads
All the best,
Peter.

Happiness is a rod in your hand.
 
Status
Not open for further replies.
Top