[meteorite-list] Virus

From: meteorites_at_space.com <meteorites_at_meteoritecentral.com>
Date: Thu Apr 22 09:37:39 2004
Message-ID: <20001231173925.13312.cpmta_at_c000.snv.cp.net>

I have been using the internet for almost 10 years, and not once have I ever gotten a virus.

What I have learned early on is that it is best to create a DOWNLOAD folder and put all attachments and exe's into it. Then before opening it, scan that entire folder with a good, and updated virus checker.

If any are detected, delete those files.

I currently use Trend Micro's "housecall"

It is free and updated buy the minute, what they get from you, if you have a virus, is a update of their pattern files for their paying users.

Depending on the mode of your connection, it takes several minutes to load, but it is well worth adding to your favorites.

And once loaded, you can continue with your web work while it is checking your eniter computer, or that Download folder that you created.

Check it out at:

http://www.antivirus.com

For me it is the end of the virus story.

Steve Schoner

----
On Sun, 31 December 2000, "Rhett Bourland" wrote:
> 
> I got this forward from a friend and even though this seems to have cleared
> itself up I thought you may still like to see it as its been a list topic in
> the past.
> 
> Rhett Bourland
> www.evansville.net/~rbourlan
> November 14, 2000, revised December 18, 2000
> 
> Hybris (W32.Hybris) is a complex supervirus whose e-mail delivery system is
> similar to Happy 99 and whose programming and payload are similar to MTX.
> Although this worm has been known since September, reports of Hybris
> infections are increasing worldwide. And while the worm currently contains a
> relatively harmless payload, Hybris has the capability to upgrade itself via
> the Internet and therefore could become dangerous. At least five distinct
> variations of Hybris have been reported by anti-virus software companies so
> far, with Hybris.D being the most common. Hybris has been upgraded to a 7 on
> the ZDNet virus meter.
> 
> How It Works
> Hybris arrives via e-mail with variable texts, depending on the components
> installed. The following characteristics are the most common:
> 
> From: Hahaha hahaha_at_sexyfun.net
> 
> Subject: Snowhite and the seven Dwarfs - The REAL Story!
> 
> Body text: "Today, Snowhite was turning 18. The 7 Dwarfs always where very
> educated and polite with Snowhite. When they go out work at mornign (sic),
> they promissed (sic) a *huge* surprise. Snowhite was anxious. Suddlently
> (sic), the door open, and the Seven Dwarfs enter..."
> 
> Attachment: a variable file name ending with .exe or .scr, most commonly
> dwarf4you.exe. Other attachments include:
> 
> 
> anpo porn.scr
> atchim.exe
> branca de neve.scr
> dunga.scr
> enano porno.exe
> joke.exe
> midgets.scr
> sexy virgin.scr
> A user clicking on the above attachment will load the worm. Hybris scans the
> system for e-mail addresses to send itself out over the Internet via e-mail.
> Hybris also inflects WSOCK32.DLL, renaming it and redirecting Windows.INI to
> point to the new, infected file. Thereafter, Hybris will send itself via
> reply mail to whomever sends new e-mails to an infected computer. Hybris is
> also savvy enough to establish its own Internet connections for the purpose
> of upgrading itself. One method, connecting to a Web site presumably
> belonging to the author, has been disabled. A second method, posting to the
> usenet newsgroup alt.comp.virus, remains active. Hybris contains up to 32
> components, and can execute or upgrade them as needed. At the moment, the
> components sent with Hybris are relatively harmless, however, the potential
> for new and more dangerous upgrades does exist.
> Removal Instructions
> Infected users should download the latest anti-virus signature files from
> ZDNet's Updates.com. Afterward, users will still need to restore a copy of
> WSOCK32.DLL, either from a clean backup or from the original Windows
> installation disks.
> 
> 
> _______________________________________________
> Meteorite-list mailing list
> Meteorite-list_at_meteoritecentral.com
> http://www.pairlist.net/mailman/listinfo/meteorite-list
___________________________________________________________________
Join the Space Program: Get FREE E-mail at http://www.space.com.

Received on Sun 31 Dec 2000 12:39:25 PM PST