Dear Warren, I have Norton 2000. Will this kill the Worm? Maureen -----Original Message----- From: Warren Wetmore <WebMerlin@MegsINet.net> To: CT-RIVER-VALLEY-L@rootsweb.com <CT-RIVER-VALLEY-L@rootsweb.com> Date: Tuesday, December 19, 2000 1:49 AM Subject: [CRV] New Manifestation of Hybris Worm -- Beware of mail from "MAILER-DAEMON" >This is a new manifestation of Hybris -- same old worm, different face, >masquerading as bounced mail instead of porn about Snow White. It came from >NBNet, an ISP used by many members of NB-L. > >Understand that a real Mailer Daemon (which returns undeliverable email) >would NEVER send an .EXE file unless you had sent it first to someone it >couldn't be delivered to. > >It's also likely that Hybris harvests target email addresses from mail >folders as well as address books. > >Yrs aye, > >Warren Wetmore > > > >Received: by pop3.mx.voyager.net (mbox webmerlin@core.com) > (with voyager.net's vgrpop Mon Dec 18 18:32:48 2000) >Received: from oem (fctnts07c19.nbnet.nb.ca [207.179.133.121]) > by mx3.mx.voyager.net (8.10.2/8.10.2) with SMTP id eBIMjpV23515 > for <WebMerlin@Megsinet.net>; Mon, 18 Dec 2000 17:45:51 -0500 (EST) >Date: Mon, 18 Dec 2000 17:45:51 -0500 (EST) >From: MAILER-DAEMON@voyager.net >Message-Id: <200012182245.eBIMjpV23515@mx3.mx.voyager.net> >MIME-Version: 1.0 >Content-Type: multipart/mixed; boundary="--VE30TU3" >Status: U > >----VE30TU3 >Content-Type: application/octet-stream; name="AIFNIGAI.EXE" >Content-Transfer-Encoding: base64 >Content-Disposition: attachment; filename="AIFNIGAI.EXE" > >TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA A >AAAAgAAAALRMzSEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA A >AAAAAAAAAAAAAAAAAABQRQAATAECAAAAAAAAAAAAAAAAAOAADwELAQAAAFYAAAAAAAAAAAAAABA A >AAAQAAAAAAAAAABAAAAQAAAAAgAABAAAAAAAAAAEAAAAAAAAAACAAAAAAgAAAAAAAAIAAAAAABA A >ABAAAAAAEAAAEAAAAAAAABAAAAAAAAAAAAAAAAhwAAAoAAAAAAAAAAAAAAAAAAA > > >==== CT-RIVER-VALLEY Mailing List ==== >Conn.River Valley Genealogical Research Library: http://www.quadrangle.org (genealogical library for Conn River area) >http://searches.rootsweb.com/cgi-bin/listsearch.pl > >http://www.nehgs.org New Eng.Hist.Genealogical Society >Listowner: NewEnglander1620@mail.ccsinet.net > >============================== >Visit Ancestry's Library - The best collection of family history >learning and how-to articles on the Internet. >http://www.ancestry.com/learn/library > >
It should, but check on the Symantec Web site. Warren ----- Original Message ----- From: "Maureen" <abc@empire.net> To: <CT-RIVER-VALLEY-L@rootsweb.com> Sent: Tuesday, December 19, 2000 6:56 AM Subject: Re: [CRV] New Manifestation of Hybris Worm -- Beware of mail from "MAILER-DAEMON" > Dear Warren, > I have Norton 2000. Will this kill the Worm? > Maureen > -----Original Message----- > From: Warren Wetmore <WebMerlin@MegsINet.net> > To: CT-RIVER-VALLEY-L@rootsweb.com <CT-RIVER-VALLEY-L@rootsweb.com> > Date: Tuesday, December 19, 2000 1:49 AM > Subject: [CRV] New Manifestation of Hybris Worm -- Beware of mail from > "MAILER-DAEMON" > > > >This is a new manifestation of Hybris -- same old worm, different face, > >masquerading as bounced mail instead of porn about Snow White. It came > from > >NBNet, an ISP used by many members of NB-L. > > > >Understand that a real Mailer Daemon (which returns undeliverable email) > >would NEVER send an .EXE file unless you had sent it first to someone it > >couldn't be delivered to. > > > >It's also likely that Hybris harvests target email addresses from mail > >folders as well as address books. > > > >Yrs aye, > > > >Warren Wetmore > > > > > > > >Received: by pop3.mx.voyager.net (mbox webmerlin@core.com) > > (with voyager.net's vgrpop Mon Dec 18 18:32:48 2000) > >Received: from oem (fctnts07c19.nbnet.nb.ca [207.179.133.121]) > > by mx3.mx.voyager.net (8.10.2/8.10.2) with SMTP id eBIMjpV23515 > > for <WebMerlin@Megsinet.net>; Mon, 18 Dec 2000 17:45:51 -0500 (EST) > >Date: Mon, 18 Dec 2000 17:45:51 -0500 (EST) > >From: MAILER-DAEMON@voyager.net > >Message-Id: <200012182245.eBIMjpV23515@mx3.mx.voyager.net> > >MIME-Version: 1.0 > >Content-Type: multipart/mixed; boundary="--VE30TU3" > >Status: U > > > >----VE30TU3 > >Content-Type: application/octet-stream; name="AIFNIGAI.EXE" > >Content-Transfer-Encoding: base64 > >Content-Disposition: attachment; filename="AIFNIGAI.EXE" > > > >TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA > A > >AAAAgAAAALRMzSEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA > A > >AAAAAAAAAAAAAAAAAABQRQAATAECAAAAAAAAAAAAAAAAAOAADwELAQAAAFYAAAAAAAAAAAAAABA > A > >AAAQAAAAAAAAAABAAAAQAAAAAgAABAAAAAAAAAAEAAAAAAAAAACAAAAAAgAAAAAAAAIAAAAAABA > A > >ABAAAAAAEAAAEAAAAAAAABAAAAAAAAAAAAAAAAhwAAAoAAAAAAAAAAAAAAAAAAA > > > > > >==== CT-RIVER-VALLEY Mailing List ==== > >Conn.River Valley Genealogical Research Library: http://www.quadrangle.org > (genealogical library for Conn River area) > >http://searches.rootsweb.com/cgi-bin/listsearch.pl > > > >http://www.nehgs.org New Eng.Hist.Genealogical Society > >Listowner: NewEnglander1620@mail.ccsinet.net > > > >============================== > >Visit Ancestry's Library - The best collection of family history > >learning and how-to articles on the Internet. > >http://www.ancestry.com/learn/library > > > > > > > ==== CT-RIVER-VALLEY Mailing List ==== > List your sources when giving information > http://searches.rootsweb.com/cgi-bin/listsearch.pl > http://www.quadrangle.org (Conn River Valley Gen.Library) > http://www.acpl.lib.in.us [Allen county library] > http://www.nehgs.org [New Eng His.Genealogical Society] > List owner: NewEnglander1620@mail.ccsinet.net > > ============================== > Visit Ancestry's Library - The best collection of family history > learning and how-to articles on the Internet. > http://www.ancestry.com/learn/library > >