CARPENTER-L Archives

Archiver > CARPENTER > 2001-01 > 0979096808


From: Chuck <>
Subject: [CARPENTER] Re: Fwd: Virus Hoax
Date: Tue, 09 Jan 2001 22:20:08 -0500
In-Reply-To: <57.ffe1327.278ce9cd@aol.com>


At 05:25 PM 1/9/01 -0500, wrote:
>Thought this might soothe some jitters.
>
>Jan
>Return-path: <>
>From:
>Full-name: AOLTechOLP
>Message-ID: <>
>Date: Tue, 9 Jan 2001 17:21:20 EST
>Subject: conversation
>To:
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
>boundary="part2_57.ffe1327.278ce8e0_boundary"
>Content-Disposition: Inline
>X-Mailer: 6.0 sub 356
>
>You: Hello. My name is {FIRST_NAME}. I am happy to address any questions or
>concerns you may have. Before we begin, may I please have your first name?
>JRobison2: Jan
>You: Hi Jan how can I help you today? :-)
>JRobison2: Osias, what is the latest on the virus from hahaha about Snow
>White?
>JRobison2: Is this a hoax or real?
>You: its a hoax Jan :-)
>JRobison2: Could you find a way to put this on the virus update? It is
>creating quite a stir on my maillists.
>JRobison2: May I copy our conversation and post it to my lists?
>You: ok Jan I will forward it to our system developer to put it there :-)


This info can be found Symantec's web site ( Norton Anti Virus)
http://www.symantec.com/ns-search/avcenter/reference/newsletter/Dec00inews.html?NS-search-set=/3a5bd/aaa0NtZNa5bd3c6&NS-doc-offset=0&;
When I ran an anti virus program on my computer it picked up the "snow
white" attachment as a virus.
You can do what you want........
Chuck



W95.Hybris.GenModerate [4] Win95
Due to a recent increase in world-wide infections of this worm, SARC is
increasing the threat level of this worm to 4.
W95.Hybris is a worm that spreads by email as an attachment to outgoing
emails. It was discovered in late September of 2000. Although very few
reports of infection were reported in October 2000 when the worm was
discovered, the worm is becoming more common in November and December
The message may include the text "Snow White and the Seven dwarves" and the
attachment may have one of several different names, including, but not
limited to:
anpo porn(.scr
atchim.exe
branca de neve.scr
dunga.scr
dwarf4you.exe
enano porno.exe
joke.exe
midgets.scr
sexy virgin.scr
Use Norton AntiVirus to repair the infected WSOCK32.DLL. Other files
detected as W95.Hybris contain only the virus body and must be deleted.
http://www.sarc.com/avcenter/venc/data/w95.hybris.gen.html
by: Cary Ng and Peter Ferrie
SARC USA and SARC Asia Pacific

This thread: