Re: [PLUG] Need Virus Information

["Michael Leone" <turgon@mike-leone.com>]

> Jim,
> The virus I am getting is the W95.Hybris virus...but as an attachment is
it
> dwarf4your.exe or something like that but payload changes depending upon
> sender.  Sometimes its a .scr other times its a .exe.   I have since
removed
> it from quarrentine and deleted it.  The mailto is always
hahaha@sexyfun.net
> and the subject is always been about "Snow White and her Seven Dwarfs"

Correct; the name is random, and can change with each sending. The type is
semi-random - either exe or scr.

"Name of attachment: Random with EXE or SCR file name extension "

http://service1.symantec.com/sarc/sarc.nsf/html/W95.Hybris.gen.html





______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug