[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Spam - Snow white



Hi all,

This is what I know about the whole "Snow White" thing (a.k.a. the Hybris
worm).

a) People have to run the enclosed attachment for the Hybris worm to infect
their local system.

b) The worm only seems to infect Windows/Outlook combinations.

c) The worm scans outgoing traffic for any email addresses

d) The worm at random intervals sends out the Snow White message to the
scanned email addresses.

The thing to remember is that noone who sends you the message is
deliberately spamming you - they probably don't even know that they're doing
it!

The easiest way to deal with incoming mail is to use you email program to
filter out the email messages by the appropriate from-name  (I won't repeat
it here lest this message be unintentionally blocked).

The ISPs are reluctant to do this became the processing power necessary
would really clag the flow of legitimate incoming email.

You can also look up any reputable antivirus website (e.g. www.sarc.com) and
search for "Hybris" for more details.

Hope this helps,
Brendan