At 01:48 3/4/01, Tom Scales wrote:
I just looked at the properties of the mail that has the Snow white virus.
It looks to be originating from someone that uses Aone as their ISP in
Australia. Could also be Ozemail (they're the same company now).
Could any of our Australian friends please run a virus check?
It's more widespread than that. Here's the history of them over the past
couple of weeks:
Date Mail Server Domain
----- ------------------
02/13 - jaring.my
02/21 - earthlink.net
02/21 - earthlink.net
02/26 - earthlink.net
02/28 - valkyrie.net
02/28 - valkyrie.net
02/28 - tiac.com (Transaction Env., Inc. provider is Sprint Gov't. Systems)
03/03 - aone.net.au
03/04 - aone.net.au
BTW, the "W32/Hybris.gen@MM" worm that sends the "Snow White" emails is
very widespread . . . and the file attachments generated change file names
too! It remains listed in McAfee's top ten . . . where it has been for
some time now.
-- John
< This message was delivered via the Olympus Mailing List >
< For questions, mailto:owner-olympus@xxxxxxxxxxxxxxx >
< Web Page: http://Zuiko.sls.bc.ca/swright/olympuslist.html >
|