[Dshield] Interesting E-mail

Brenna Primrose drxlecter at phreaker.net
Mon May 20 12:31:48 GMT 2002


The hybris virus always fakes the header to make it look like it came
from sexyfun.net.  Unfortunately, there are still people with the hybris
virus, but it's been around for at least a couple of years.

AIM - abosolut x psycho
Yahoo! - absolut_contagion
ICQ - 1363187
MSN - r00t at creighton.edu
http://gsa.creighton.edu
http://profiles.yahoo.com/absolut_contagion
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GSS d-- s: a-- C++ UL++++ P+ L+ E W++ N+ o-- K- w+ 
O-- M V-- PS++ PE Y+ PGP- t-- 5-- X++ R- tv+ b+++ DI D+ 
G e* h- r++ x+ 
------END GEEK CODE BLOCK------

-----Original Message-----
From: list-admin at dshield.org [mailto:list-admin at dshield.org] On Behalf
Of Daniels566 at cs.com
Sent: Sunday, May 19, 2002 12:17 PM
To: list at dshield.org
Subject: [Dshield] Interesting E-mail

Strange goings on all the time? Just got this today, never received the 
original infected one. Thought I would pass it along for interesting
reading. 
This site is supposed to be an undercover cloaked to educate people
about 
viruses.

http://www.sexyfun.net/

On the same hand their saying the legitament xxx site is not
responsible.
There is somewhat a similarity at this site also.

http://www.yourinter.net/

Some of you might want to be on the lookout for this type of thing.

John Daniels
Quote > ( "                                          " ) < Unquote
above not printable:

Subj:    WARNING: YOU WERE SENT A VIRUS     
Date:   5/19/02 10:59:07 AM Eastern Daylight Time   
From:   <A
HREF="mailto:postmaster at yismail.yourinter.net">postmaster at yismail.yourin
ter.net</A>    
To: <A HREF="mailto:kdann at kiddomail.com">kdann at kiddomail.com</A> 
Received from Internet: click here for more information 
    
The Declude Virus software on yismail.yourinter.net has reported that
you 
were
sent an E-mail from <>, containing the : W32/Hybris.worm.B virus in the
midgets.scr attachment. The subject of the E-mail was "Snowhite and the
Seven 
Dwarfs - The REAL story!". 
The E-mail containing the virus has been quarantined to prevent further 
damage.

Headers Follow:
Received: from fif [216.41.226.71] by yismail.yourinter.net
(SMTPD32-7.10) id AF04B66026E; Sat, 18 May 2002 18:00:36 -0400
From: Hahaha <hahaha at sexyfun.net>
Subject: Snowhite and the Seven Dwarfs - The REAL story!
MIME-Version: 1.0
Content-Type: multipart/mixed; 
boundary="--VEFWDUFSHYF85I3KPQZ05A74L6RCPQ70TIJ"
Message-Id: <200205181800877.SM01432 at fif>


[[ Attachement of type text/html deleted]]

_______________________________________________
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list





More information about the list mailing list