Date: Tue, 16 Jan 2001 20:48:14 -0500
Reply-To: David Beierl <dbeierl@ATTGLOBAL.NET>
Sender: Vanagon Mailing List <vanagon@gerry.vanagon.com>
From: David Beierl <dbeierl@ATTGLOBAL.NET>
Subject: Please read...I'm concerned.
Content-Type: text/plain; charset="us-ascii"; format=flowed
Folks, some of you (you know who you are) are getting this just to know
what I'm up to. For the rest...
For those lists where this is grossly off-topic, I humbly apologize. In
fact it's grossly off-topic on all these lists, but some of them are having
a good bit of trouble with this, and I hope the others will be able to
avoid it.
I'm talking about a recent virus/worm/Trojan program known technically as
W95.hybris.gen, also as Snowhite [sic]. It tends to arrive in an email
addressed from [saving your reverence] <hahaha@sexyfun.net>. *This Address
Is A Fake.*
I have become rather concerned about this one over the last several weeks;
I'm right now engaged in trying to help several people around the country
recover from it; I've received at least a dozen copies during this time.
It has been around since 25 September, and it has an astonishing technical
ability to adapt itself which in my humble opinion makes it exceedingly
dangerous, even though it has not created *much* actual damage to date. I
say much -- I know of at least two instances where people's systems have
been quickly rendered unusable, and more where the infection has been
difficult to eradicate. It is technically by far the most advanced such
program yet written, and its comparatively benign behavior until now is no
indicator of its potential. It also appears to have advanced methods of
discovering addresses to send itself to, and may make a concerted effort to
prevent itself being removed from an infected system.
A dedicated computer professional has purchased the domain name
(sexyfun.net) where the email allegedly originates from, and has set up a
website there at http://www.sexyfun.net/ in order to help people recover
from this virus, and to avoid infection, and, he hopes, to eradicate it
from the planet. He (she?) is of the opinion (which I share) that it is
important for us all to cooperate if we don't want this to be around for a
very long time. Happy99 lasted a year, and technically it was a
firecracker to W95.hybris.gen's ICBM. I won't waste any more time
describing W95.hybris.gen because the website has or has links to pretty
much everything that is known about the beast.
I urge you to visit the site, plan on spending an hour or more learning
about it, protect yourselves sensibly, and assist others in any way
possible. As our beloved Coast Guard puts it "Mariners are requested to
maintain a sharp lookout, render assistance as needed, and report all
sightings to the nearest Coast Guard unit."
I will do whatever I can to help anyone understand and use the information
available at www.sexyfun.net/ (which continues to be updated as more
information becomes available about the program).
Thanks for your attention, and please think about this carefully.
Best Regards,
David Beierl
401 274-5827 East Coast -- 8am to midnight ok.
David Beierl - dbeierl@attglobal.net