[Dshield] Interesting E-mail
sama at enteract.com
Mon May 20 11:41:54 GMT 2002
I've received actual viruses before from hahaha at sexyfun.net and
we've also seen lots from it, including spam, at my place of
employment (it's been blocked now for a long time).
Indeed I think I *received* the Snow White virus email with the
midgets.scr file from them many months ago!
> -----Original Message-----
> From: list-admin at dshield.org [mailto:list-admin at dshield.org]On Behalf Of
> Daniels566 at cs.com
> Sent: Sunday, May 19, 2002 1:17 PM
> To: list at dshield.org
> Subject: [Dshield] Interesting E-mail
> Strange goings on all the time? Just got this today, never received the
> original infected one. Thought I would pass it along for
> interesting reading.
> This site is supposed to be an undercover cloaked to educate people about
> On the same hand their saying the legitament xxx site is not responsible.
> There is somewhat a similarity at this site also.
> Some of you might want to be on the lookout for this type of thing.
> John Daniels
> Quote > ( " " ) < Unquote
> above not printable:
> Subj: WARNING: YOU WERE SENT A VIRUS
> Date: 5/19/02 10:59:07 AM Eastern Daylight Time
> From: <A
> HREF="mailto:postmaster at yismail.yourinter.net">postmaster at yismail.
> To: <A HREF="mailto:kdann at kiddomail.com">kdann at kiddomail.com</A>
> Received from Internet: click here for more information
> The Declude Virus software on yismail.yourinter.net has reported that you
> sent an E-mail from <>, containing the : W32/Hybris.worm.B virus in the
> midgets.scr attachment. The subject of the E-mail was "Snowhite
> and the Seven
> Dwarfs - The REAL story!".
> The E-mail containing the virus has been quarantined to prevent further
> Headers Follow:
> Received: from fif [126.96.36.199] by yismail.yourinter.net
> (SMTPD32-7.10) id AF04B66026E; Sat, 18 May 2002 18:00:36 -0400
> From: Hahaha <hahaha at sexyfun.net>
> Subject: Snowhite and the Seven Dwarfs - The REAL story!
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
> Message-Id: <200205181800877.SM01432 at fif>
> [[ Attachement of type text/html deleted]]
> Dshield mailing list
> Dshield at dshield.org
> To change your subscription options (or unsubscribe), see:
More information about the list