[Esa-l]Strange DHGOHIDH.exe with no From:

[Graham Dunn]

heh, yeah, however, all the previous instances of Hybris I've seen have
had the From: haha at sexyfun.net line.

That was more the focus of my question.

On Mon, Jun 18, 2001 at 03:25:20PM +0200, Phil Pennock wrote:
> On 2001-06-18 at 09:14 -0400, Graham Dunn wrote:
> > Got this one sent to us ... defanged, and when when examined:
> 
> > HYBRIS
> 
> > Anyone seen this before?
> 
> Hybris is fairly well known.
> 
> <http://www.sophos.com/virusinfo/analyses/w32hybrisd.html>
> <http://www.sophos.com/virusinfo/analyses/w32hybrisc.html>
> <http://www.sophos.com/virusinfo/analyses/w32hybrisb.html>
> 
> Worm which can update itself.
> -- 
> Phil Pennock                        <pdp at nl.demon.net> <Phil.Pennock at thus.net>
> Demon Internet Nederland -- Network Operations Centre -- Systems Administrator
> Libertes philosophica.
> NL Sales: +31 20 422 20 00                          NL Support: 0800 33 6666 8
> _______________________________________________
> E-mail Security Announce list mailing list
> E-mail Security Announce list at spconnect.com
> http://www.spconnect.com/mailman/listinfo/esa-l

-- 
  gdunn at inscriber.com	  Graham Dunn         || ||| | ||| |||| | |||| |