Tech: Snow White virus

Subject: Snow White virus alert
From: McGrath of Harlow
Date: 06 Jan 01 - 02:11 PM

I don't normally pass on these, but it comes from the ISP I use, ntl, who are not hoaxers (not much good as an ISP either, but that's beside the point - and they are free):

Virus Alert ntl have become aware that many customers have recently become infected with the W95.Hybris.gen worm. This worm spreads via an email attachment while the text of the infected email may contain the text "Snow White and the Seven Dwarves".

If you are sent such an email please delete it immediately.

Subject: RE: Snow White virus
From: Bernard
Date: 06 Jan 01 - 02:33 PM

Not a lot of info about this one, but Symantec have it listed:

Symantec Anti-Virus Center

Subject: RE: Snow White virus
From: Joe Offer
Date: 06 Jan 01 - 02:45 PM

Click here for information on this worm from Symantec/Norton Antivirus. As you can see, this worm spreads by e-mail attachments, mostly attachments with the file name ending *.exe and *.scr. I can't remember exactly what *.scr files are - I think they're bitmap screens that Windows displays at certain points, like booting and shutting down. *.exe files are executable program files - when you click on them, they do something. Last July, a friend innocently sent me an *.exe fireworks file that turned out to be a virus. Microsoft Word *.doc document files can also be dangerous - it's better to highlight, copy, and paste the words right into the e-mail document.

This might be a good time to remind people: Do not trust e-mail attachments, even if they come from friends. Do not click on them unless you're absolutely sure what they are. If you're not sure but feel you must click on them, scan them with an up-to-date antivirus program (by up-to-date, I mean something that has been updated THIS MONTH). It's also a good idea to refrain from sending attachments. Those cute little things that you get five copies of on New Years Day, bog down the Internet and can also be carriers of viruses and worms.

-Joe Offer-

Subject: RE: Snow White virus
From: Joe Offer
Date: 06 Jan 01 - 02:54 PM

Well, it looks like Symantec developed a heck of a lot of information between 2:33 and 2:45. Click Bernard's link, and then click mine - the difference is dramatic. How'd that happen, Bernard?
-Joe Offer-

Subject: RE: Snow White virus
From: Bernard
Date: 06 Jan 01 - 03:00 PM

Not a clue! Ask Symantec!!

Subject: RE: Snow White virus
From: Bernard
Date: 06 Jan 01 - 03:06 PM

Oh, and .scr files are screensavers. The boot and shutdown screens are in logo.sys, logos.sys and logow.sys - and it's not too difficult to change them!!

Subject: RE: Snow White virus
From: Jon Freeman
Date: 06 Jan 01 - 03:21 PM

I have said this before but a screen saver is a standard excecutable file (.EXE) renamed to .SCR to be used as a screen saver. Screen savers do have to contain 3 specific functions but they are quite capable of running stand alone by renaming back to .EXE.

Jon

Subject: RE: Snow White virus
From: Jon Freeman
Date: 06 Jan 01 - 06:02 PM

I should have added that the sys files that Bernard has mentioned are nothing more than .bmp files - you could edit them using Paint or create a .bmp file and rename it to design your own with no ill effects to Windows.

Jon

Subject: RE: Snow White virus
From: McGrath of Harlow
Date: 06 Jan 01 - 06:49 PM

"Oh, and .scr files are screensavers. The boot and shutdown screens are in logo.sys, logos.sys and logow.sys - and it's not too difficult to change them!!"

Yes it bloody is - when you've no idea what all that means, like me. About the onlyn thing I un derstood in there was "files", "screensavers", and of course "it's not too difficuilt to change"...

Subject: RE: Snow White virus
From: GUEST,Joerg
Date: 06 Jan 01 - 08:22 PM

Thanks for the information, Jon. Didn't know this yet. I gave up coping with PC software when Gates launched that Windoze nonsense. Might have been wrong, but as long as I'm sometimes told facts like ".scr files are also executables" I'm still not too sorry.

Joerg

Subject: RE: Snow White virus
From: pict
Date: 06 Jan 01 - 10:13 PM

I'm amazed that anyone ever opens email attachments particularly unsolicited ones I never do.