FYI:
I also went to the site. Based on what I know about the worm from other,
independent AV sources (McAfee and Norton), this site's information about
the worm and the links to other AV sites that can help clean out an
infected machine are completely legitimate. In fact it's a good source of
this information!
I did note here and from one other source that the worm will also send the
"Snow White" emails out to addresses found on web pages. Thus, if someone
not on this mail hits the OM mail list web page, and has an infected
machine, it will send a "Snow White" email to this list. This now explains
why I've been unable to match the source mail server of some of them to at
least an ambiguity group of list members who might have infected
machines. Further, it also very likely explains another case that matched
three list members why they (the list members) all came up clean. I'm not
talking individual email addresses but SMTP mail servers which can serve a
multitude of individual email addresses. The mail server is as far as you
can trace it unless the server logs all the mail and you have a copy of the
log.
-- John
At 16:32 2/15/01, John Hudson wrote:
After receiving this message from the list I did a WHOIS search on
sexyfun.net and then went to their web page at
www.sexyfun.net
Who knows whether the web page is a hoax but it would seem prudent to
delete the original attached file unopened. On the otherhand, Snowwhite
could be one up on the Russian tennis diva whose name has been spread
around the net lately!!
< This message was delivered via the Olympus Mailing List >
< For questions, mailto:owner-olympus@xxxxxxxxxxxxxxx >
< Web Page: http://Zuiko.sls.bc.ca/swright/olympuslist.html >
|