FW: [Esa-l] Stopping Hybris via. global /etc/procmailrc

[Floyd Pierce]

Has anyone seen anything other than an exe or a scr from Hybris?
I'm poisoning them so I hope that's good enough...

--
Floyd Pierce              | Director of Information Technology
Phone  847-790-2830 (IL)  | Box USA
Phone  817-783-2355 (TX)  | floydp at boxusa.com
Fax    847-790-2880       | floydp at imagin.net


-----Original Message-----
From: esa-l-admin at spconnect.com [mailto:esa-l-admin at spconnect.com]On
Behalf Of Bjarni R. Einarsson
Sent: Monday, January 08, 2001 6:42 AM
To: esa-l at spconnect.com
Subject: [Esa-l] Stopping Hybris via. global /etc/procmailrc


Hi,

I've been getting huge amounts of Hybris via. mail lately, and alot of
it is (as previously discussed here) sent with comletely random file
names and few recognizable headers.  I've been collecting my
specimens, and have found the following trends: