On Sat, Feb 10, 2001 at 08:32:03AM -0800, Chuq Von Rospach wrote:
> On 2/10/01 1:13 AM, "Stephanie da Silva" <[EMAIL PROTECTED]> wrote:
>
>
> > I wish I could believe you. I'm still getting 30 to 40 Snowhites
> > a day, this has been going on for a couple months.
>
> That's bad. I've seen a few waves, but mostly it's gone again.
>
> Snow White, as fas as I can tell, ISN'T a "read the address book and forward
> yourself" virus. The copies I've examined seem instead to have been
> consciously sent to spam lists -- it's a script-kiddie job, not a
> self-forwarder.
If they're going to scraped addresses, it's a pretty weird scrape job.
We're getting one-off copies to our mailing lists here. A typical
spamware run will send mail to 1000-2000 lists at a time, but we're
getting Snowhite in dribs and drabs, user by user.
Maybe it sends a copy of itself to one person chosen randomly from
your address book each time you send mail. I don't know. But it
doesn't look like a ratware job.
--
Regards,
Tim Pierce
RootsWeb.com lead system admonsterator
and Chief Hacking Officer
