TMG-L Archives

Archiver > TMG > 2001-01 > 0979958148


From: "Charles Roberts" <>
Subject: Re: [TMG] Snow White Virus
Date: Fri, 19 Jan 2001 21:35:48 -0500
References: <5.0.2.1.0.20010119182104.0241dd80@mail.bicnet.net> <3A68DA3A.AF4170E6@infoave.net> <024d01c0827c$ecdc73c0$d8d6d63f@oemcomputer> <3A68F428.973BEF5A@infoave.net>


Hello, I am wondering if someone can expand on the "Snow White"
virus. What are its characteristics and what damage does it do to
an individual computer? I have seen this subject raised in
message threads on several genealogy based mailing lists, yet, to
my knowledge, I personally have never received this "virus."
Also, I could find no reference to this "virus/trojan horse" on
the Symantec Anti-Virus web site. Finally, I understand from
messages received from list owners of other mailing that, since
Roots Web does not allow attachments to pass through their
servers, an attachment carrying a virus could not be transmitted
through any of the mailing lists Roots Web hosts. Any comments?

Charles Roberts ()
Potomac, MD


> All messages addressed to me are downloaded before I can
> learn the name of the sender or the subject. Once it is
> downloaded I can delete it, not before.
>
> Most of the more harmful viruses are in an executable file
> of some type but some viruses can infect without an
> attachment. I read that those not in an executable file are
> not the damaging ones that erase files or worse.
>
> All I really know is that the best protection is stop and
> think before opening an attachment. Often the message itself
> is a clue. Some virues will use the persons email address
> so you think it is from someone you know. You might ask
> yourself how that person would spell words like; Snowhite,
> mornign, promissed, and suddlently? Do they know the plural
> of dwarf? Would they be sending something like that to you?
> I do not know what "that" is but the wording gives me a
> clue.
>
> There are many sources on the web that can give far better
> details than I can give, here are two.
> http://www.f-secure.com/v-descs/hybris.shtml
> http://www.kaspersky.com/news.asp?tnews=0&nview=1&id=134&page=0
>
> For more information about the Snowhite virus go to:
> http://www.sexyfun.net/ (this is not a adult site of any
> type) This site was setup to fight the virus as stated in a
> message from this site. This site has many links to other
> sites such as Symantec and if one followed all of them and
> read all the material you would be an expert about virus /
> worms and all the rest.
>
> Richard Brogger
> ________________________________________________
> Things you should know:
>
> 1.The current owner of the domain sexyfun.net, the
> hosting company slowmoe.com, or
> anyone affiliated with the these two did NOT
> create the virus / worm.
> This site WAS created in response to the virus /
> worm.
> 2.Hopefully, this site will help you get rid of the
> virus.
> 3.The domain was purchased on Dec-11-2000, this
> virus was first reported on Sept-25-2000 (to my
> knowledge)
> 4.This site is in no way affiliated with any other
> site on the Internet, this includes sexyfun.com.
>
> To make things perfectly clear: The virus is NOT coming
> from us in any way. The return address has been
> faked. In all likelihood the infected person doesn't
> know they are infected, and is sending you the emails
> unknowingly. If anyone remembers the LoveBug Virus,
> then you understand. Please read the information below, I
> hope you find it useful.
> _________________________________________________
>
> bd wrote:
> >
> > ??I don't understand
> > 1. why do you need to download it?
> > 2. Can't you just send it out via delete? I get this
obnoxious bug
> > sometimes 2-3 times a day and so far have just deleted it
with - as far as
> > I'm aware - no ill effects. 3. Someone has said that a virus
can infect you
> > even if you do not open the attachment. Elucidation?
> >
> > Of course there are many more things I don't understand, but
this will do
> > for now.
> >
> > Barbara Harris
> >
> > Richard wrote:
> >
> > Half the time when I get sent a copy it causes my ISP
> > > to drop out and I have spent as much as an hour trying to
> > > get Snowhite downloaded so I can receive my mail. I did
not
> > > open the attachment, it did no damage on my machine but it
> > > has cost me a lot of time and all of us a lot of money.
> > >
> > > Richard Brogger
> > >
> > > Bob Geldart wrote:
> > > >
> > > > At 01:05 AM 1/19/2001, you wrote:
> > > > >Fi-fi on that nasty person!!! May they burn in the
world of crashed
> > hard
> > > > >disks and destroyed FATs.
> > > >
> > > > A little compassion.... In all likelihood, that person
may not have
> > > > realized what was happening, or even that it was sent
from their
> > machine.
> > > >
> > > > Bob Geldart
> > > > Maynard, MA
> > >
> > >
>
>


This thread: