[debutant] Blanche neige et ...les sexe nains

Sat, 10 Feb 2001 23:24:56 -0800 

C'etait un jour avant son dix huitieme anniversaire. Les 7 nains, qui
avaient
aidé 'blanche neige' toutes ces années après qu'elle se soit enfuit de
chez
sa belle mère, lui avaient promis une *grosse* surprise. A 5 heures
comme
toujours, ils sont rentrés du travail. Mais cette fois ils avaient un
air
coquin...

FICHIER ATTACHE: nains.exe !!!!!

http://www.sexyfun.net/index.shtml
-- 
Jean 
                               \\\!/// 
                               -(@ @)- 
----------------------------oOO--(_)--OOo---------------------------- 
Win World sarl                                     Visitez nos sites: 
                        Venez rêver -----> http://www.Demoiselles.com 
4, rue Saint Viel                               http://www.Sadems.com 
34 190 Ganges                           http://www.EuropeTourisme.com 
France                                           http://www.Votre.net 
Gsm 06 86 12 49 15                         http://www.CyberBoutic.com 
Tel&Fax 04 67 73 67 29                        http://www.in-folio.com
Title: Snowwhite / Hybris.gen Information: Main
[Translate, Traduisent, Ubersetzen, Traducono, Traduzem, Traducen]

Have you been receiving spam/virus from "[EMAIL PROTECTED]"?

DO NOT OPEN THE EMAILS. THEY ARE INFECTED AND HAVE A FAKE RETURN ADDRESS!!


(This page is very much under construction. I know it looks plain. The site isn't here to look pretty; it's here to help people)
Last Updated: Feb-7-2001 8:53pm EST


Things you should know:
  1. The current owner of the domain sexyfun.net, the hosting company slowmoe.com, or anyone affiliated with the these two did NOT create the virus / worm.
    This site WAS created in response to the virus / worm.
  2. Hopefully, this site will help you get rid of the virus.
  3. The domain was purchased on Dec-11-2000, this virus was first reported on Sept-25-2000 (to my knowledge)
  4. This site is in no way affiliated with any other site on the Internet, this includes sexyfun.com.
To make things perfectly clear: The virus is NOT coming from us in any way. The return address has been faked. In all likelihood the infected person doesn't know they are infected, and is sending you the emails unknowingly. If anyone remembers the LoveBug Virus, then you understand. Please read the information below, I hope you find it useful.

Informational Links

Explanation:
I was first alerted of this virus when my company's antivirus software started sending out alerts of infected attachments. Naturally, I tried to trace where the email was being sent. A simple check of the return email address indicated that it came from the domain sexyfun.net. However, sexyfun.net didn't exist. This was obviously a fake address. It was soon after that I decided to make the domain a reality. My hope was that other IT people, as well as regular end users, would stumble across this page and realize a virus infected them. Below are links to various antivirus sites, so that you can clean your system.
Symantec
Update Page		 AVP
Update Page		 E-Safe
Update Page
F-Prot
Update Page		 Inoculan
Update Page		 McAfee
Update Page
PC-Cillin
Update Page		 Sophos
Update Page		 VET
Update Page

Write Ups about the Virus

HERE is a write up from Symantec's site:
HERE is a write up from Sophos's site:
HERE is a write up from F-Prot's site:
HERE is a write from Kaspersky Labs. (good read)

Planet IT [NEW] (Excellent Write-Up)
If you still don't take our word for it, how about from SpamCop.net
[SpamCop-Help] How do I stop this spam
Comments:
Once infected, I believe that the virus makes all outgoing infected emails have the [EMAIL PROTECTED] return address. I haven't been infected myself, so I am gathering this from observations of the infected emails that have been sent to me.

I urge everyone to get some antivirus software and make sure their systems are clean.

Also, if you have any information that you think would be helpful to others, email me and I will see about adding that to this page also. Perhaps a forum of sorts would be helpful.
Helpful Links:
I Need Your Help! I would like to put up some links that can tell people precisely how to set up email rules/blocks/filters, so that any emails from '[EMAIL PROTECTED]' will go directly to the trash. Unfortunately, I don't have access to every email client in the world. If you would like to help, please send me an email stating how to put a rule in place to move all emails from '[EMAIL PROTECTED]' to the trash.
Please Include:
  • Email client name AND version (IE: MS Outlook 2000)
  • Very clear and easy to follow steps.
  • If you want to include screen shots, make the images JPG and small in size/resolution.
  • It would be nice if you could write the HTML code yourself (only if the code is very clean, no scripts, not done in an editor such as word that throws a bunch of extra crap into the html), but if you just want to send me the steps in plain text, then I have no problem creating the HTML for you.
  • Say whether or not it's okay to give credit using your first name. (I like to give people credit for helping)
Personally, we prefer people to try to trace the emails then contact the person (or their ISP) sending the virus, but understand that sometimes you just want them to 'go away' and give you time to think.
Must/Worth Reading Helpful E-Mails Personal Contributions Site Stats Make sure you read the Open Disclosure above
Giving Credit
Contact Us - Make SURE you read the FAQ!!
203505 Visitors since 12/11/2000

Répondre à