PDA

View Full Version : [email protected] Have you received this E...?


Turbofan
6th Mar 2001, 08:42
If you've received this E, delete it without opening the attachment.

I've just done a search of this forum, and it seems someone beat me to bringing the news, check here:

http://www.pprune.org/ubb/NonCGI/Forum35/HTML/000680.html

For an excellent write up by Planet-IT, check this out:

http://www.planetit.com/techcenters/docs/security-hostile_content/news/PIT20010109S0021/1?spsubcat=viruses


The virus doesn't appear to be causing trouble to anyones systems yet, but apparently it has the ability to change itself to fool virus scans, and potentially turn itself into something much more sinister. From what I've read about it, it's a real shrewd SOB...

If you've got it (the E-mail), then as far as I can tell, someone else has opened the attachment, it's embedded itself in their system, and then sent "itself" to everyone on their E list. Which means you're on their list. Basically, one of your friends/collegues has got an infested system...!

What makes this virus (actually a "worm" called HYBRIS, activated when the attachment is opened) so bad, is the fact that it accesses certain websites, newsgroups, etc, for updated information (from the creator of the virus I would imagine), to mutate itself into something different... not a nice thought.

Check out more helpful info here:

http://www.sexyfun.net

The site above was created to aid in getting rid of this virus, so don't be concerned about the URL.

Cheers,
Mark.

matelot
6th Mar 2001, 11:52
Just got it when checking four other e-mail accounts at work. No addressee, just from hahaha etc.

As it had an attachment, binned it straight away.

Be careful out there!

------------------
Me, sweat? I'm that cool, it's condensation.

KYGMSY
8th Mar 2001, 00:44
It seems that I've been the only one having problems with this b*****d thing.

I received it almost every day, trying several virus checkers, but nothing was stopping it from returning !! Even though I hadn't opened the attatchment it kept infecting the wsock32.dll file.

I found that it kept causing Explorer to crash and just a blank screen would show after that. I decided to format the drive and start over again.

Next day the b*****d thing came back again !! TWICE !!! All before I could get another virus checker installed.

Turbofan
11th Mar 2001, 05:29
Hey KYGMSY, from what I can tell, it's someone who has you on their mailing list that's sending it to you. More correctly, the worm apparently sends 'itself' to all the people on the host computers E list.

As long as you don't open the file, it won't affect your system.

I could be wrong, but I think that's right... [shrug/grin]

Good luck in getting your system clean.