[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[at-l] OK...who's the joker
These aren't coming from the list... please forward me a copy...
-R
----- Original Message -----
From: <Slyatpct@aol.com>
To: <kahley7@ptd.net>; <at-l@backcountry.net>
Sent: Tuesday, January 09, 2001 7:41 PM
Subject: Re: [at-l] OK...who's the joker
> In a message dated 1/9/2001 8:00:19 PM Eastern Standard Time,
kahley7@ptd.net
> writes:
>
> << I got that damn email again.......the seven dwarves thing!!
>
> which one of you is posting from Hahaha <hahaha@sexyfun.net>? >>
>
>
> I got that email too, but didn't open it. I forwarded it back to sender
and
> here's the reply I received:
>
>
> +-------------------
> | Please read this whole email as it contains information that can
> | be used to protect your computer from a Virus that is spreading
> | around the internet.
> |
> |NOTA BENE: This message is automatically generated; PLEASE DO NOT REPLY.
> | Subsequent email with the same reply-to address should not
> | induce additional responses from this service.
> +---------
>
> Hello,
>
> You are receiving this message because a email, which contained
> your email address as the return / reply-to address, was sent to
> hahaha@sexyfun.net. This is a list of possible reasons why you received
> this message.
>
> 1) You sent an email to hahaha@sexyfun.net to request, complain or notify
> this user that they are SPAMMING, sending an email with a virus,
> sending an email that has content that may not be appropriate for
> minors, to be removed from a mailing list, etc..
>
> 2) Someone else sent an email to hahaha@sexyfun.net and they are using
> your email address as their return / reply-to address. If this is
> the case we are sorry that this email was sent to you but please
> do read it as it does contain information about a virus that is
> spreading around the internet that we are trying to stop / slow
> down.
>
> 3) You may already be infected with the computer virus for which this
> email is trying to inform you of. This virus (W32.Hybris.gen)
> will send a copy of itself to the reply-to address of any incoming
> emails that a infected computer receives. So when you received
> another copy of the "SPAM" that this virus sends out from another
> infected computer, the virus sends a copy of itself to
> hahaha@sexyfun.net since hahaha@sexyfun.net is the reply-to address
> of the "SPAM" the virus sends out.
>
> The truth about this SPAM, that contains Snowwhite in the Subject, is
> that a virus called W32.Hybris.gen sends out these emails with attachments
> that are also infected with this virus from a already infected computer
> hopping to infect more computers. This virus uses the address book as well
> as scans incoming and outgoing mail and http traffic for email address
> to send a copy of itself to. These emails the virus sends out use a
> fake / spoofed FROM: address of hahaha@sexyfun.net to hide its tracks.
>
> We registered the domain sexyfun.net in order to provide the people
> of the internet information about this virus as well as tips on how
> to detect, clean, trace and protect yourself from this virus.
>
> Here is a list of other facts that may answer some of your questions
> that you may have already.
>
> 1) We do NOT maintain any mailing lists on our system.
> 2) This user (hahaha) does NOT exist on our system.
> 3) The email that you got with the From: field of hahaha@sexyfun.net
> did NOT come from sexyfun.net or the hosting companies network.
> This email address was FAKED / SPOOFED.
> 4) The email you got is in FACT a way for the (W95.Hybris.gen) virus
> to spread itself around the world / Internet like the ILOVEYOU
> virus of a few months past.
> 5) If you would look at the Received: line of the FULL email header, it
> will tell you the real IP / Computer name that has sent you this
> virus, which is most likely someone you know that is infected with
> the virus and is not aware of it.
> 6) The owner of the domain sexyfun.net and the hosting company has
> setup a help page with information about the (W95.Hybris.gen)
> virus, links to software that you can use to clean your computer
> if you are infected as well as other misc. information.
> 7) We did NOT create the virus or know who the person is that created
> the virus. We are NOT affiliated with this person / persons and the
> same applies to our hosting company.
>
> NOTE: As long as you don't run / open / double click on the attachment
> of this email, this virus should not be able to infect you just
> by reading the email.
>
> Here are links to well known companies of anti-virus products that
> will show that what has been said above is true.
>
> http://www.f-secure.com/v-descs/hybris.shtml
> http://www.kaspersky.com/news.asp?tnews=0&nview=1&id=134&page=0
>
> This is the link to the website we have setup to provide additional
> information about this Virus.
>
> http://www.sexyfun.net/ (this is not a adult site of any type)
>
> If have any questions about this, our contact information is located on
> our web site ( http://www.sexyfun.net/ )
>
> Thanks you for your time.
>
> -----
> NOTE: Any replies sent to this email are not viewed by us. Please use
> our contact information located on our site. Thanks.
> _______________________________________________
> AT-L mailing list
> AT-L@mailman.backcountry.net
> http://mailman.backcountry.net/mailman/listinfo/at-l
>