|
|
#1
February 16th, 2002, 01:51 PM
|
||||
|
||||
those bastards
Hmm today I opened Outlook express and AVG was on the job, first time I've seen it in action. I had an email from "hahaha@sexyfun.net" (maybe com??) and it had an attached file "dwarf4u.exe" It told me what virus it was but i figured I would still be able to see it in the virus vault and I can't... The msg text was about snow white but I don't think AVG called the virus snow white.. anyway this is the second time i have received this, last time Vcatch caught it.
__________________
"The price of freedom is eternal vigilance." - Thomas Jefferson |
|
#3
February 16th, 2002, 02:15 PM
|
||||
|
||||
|
Re: those bastards
Hi Detox,
This is Hybris (or a variant). Read the specs over here: http://securityresponse.symantec.com/avcenter/venc/data/w95.hybris.gen.html regards. paul
__________________
01110010 01100101 01100111 01100001 01110010 01100100 01110011 00100000 01110000 01100001 01110101 01101100 |
|
#4
February 16th, 2002, 06:02 PM
|
||||
|
||||
|
Re: those bastards
Hello Detox
I got that same "hahaha thingy" and one encrypted file once together. You should remember that senders address and block it from your server. Atleast that option is on outlook express.(thank God) I also responded the sender and it was nothing I could put it here C/;: -). I got them from simlive@willmar.com and stevej353@excite.com. They won´t bother me anymore. -Ari a.k.a Krusty
__________________
¿ Did you remember to make back up today ? Please don´t call Gator\Claria as spyware; call it trojan horse. RealPlayer breaks your puter. Don´t do as I do, Do exactly I advice |
|
#5
February 16th, 2002, 06:40 PM
|
||||
|
||||
|
Re: those bastards
The worm uses a fake email address hahaha@sexyfun.net. Some people opened a webpage on http://www.sexyfun.net/ with a lot of good information and removal help about the hybris worm.
wizard
__________________
wizardRESEARCH - Malware Research & Analysis since 1989 |
|
#6
February 17th, 2002, 04:01 PM
|
||||
|
||||
|
Re: those bastards
Very cool now I should try to figure out who has this that I know, since it would sound like someone with my address in their book is sending it to me unknowingly...
Thanks for the great links those were very informative! Now I definitely know exactly what is trying to attack me!
__________________
"The price of freedom is eternal vigilance." - Thomas Jefferson |
| « Previous Thread | Next Thread » |
| Thread Tools | Search this Thread |
|
|
