Return-Path: Received: (qmail 716 invoked from network); 6 Nov 2001 00:48:45 -0000 Received: from unknown (HELO warrior.services.quay.plus.net) (212.159.14.227) by excalibur-qfe1-smtp-plusnet.harl.plus.net with SMTP; 6 Nov 2001 00:48:45 -0000 Received: (qmail 25952 invoked from network); 6 Nov 2001 00:48:46 -0000 Received: from unknown (HELO post.thorcom.com) (212.172.148.70) by warrior.services.quay.plus.net with SMTP; 6 Nov 2001 00:48:46 -0000 Received: from majordom by post.thorcom.com with local (Exim 3.33 #2) id 160uHj-0002vf-00 for rsgb_lf_group-outgoing@blacksheep.org; Tue, 06 Nov 2001 00:40:11 +0000 Received: from sun4.scgroup.com ([192.55.122.7]) by post.thorcom.com with esmtp (Exim 3.33 #2) id 160uHh-0002va-00 for rsgb_lf_group@blacksheep.org; Tue, 06 Nov 2001 00:40:10 +0000 Received: from parissn2 (AMontsouris-101-1-3-195.abo.wanadoo.fr [193.252.108.195]) by sun4.scgroup.com (8.9.1b+Sun/8.9.1) with SMTP id QAA01193 for ; Mon, 5 Nov 2001 16:39:15 -0800 (PST) Message-ID: <001d01c1665b$7e0ec9c0$0400000a@parissn2> From: "Stewart Nelson" To: rsgb_lf_group@blacksheep.org References: <200111052219.fA5MJap17276@k2.pncl.co.uk> Subject: LF: Don't open virus: [Snowhite ...] Date: Tue, 6 Nov 2001 01:39:26 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Precedence: bulk Reply-To: rsgb_lf_group@blacksheep.org X-Listname: rsgb_lf_group Sender: Hi all, It appears that the W95.Hybris.gen virus was posted here. If you accidentally opened it, see http://www.symantec.com/avcenter/venc/data/w95.hybris.gen.html The machine it was sent from is in the UK and connected via Pinnacle Internet. Other clues in the header are that the computer is called "233", presumably its speed, and the IP address of 212.35.234.187 . If that's you, check the above link to clean your machine. Sorry for the off topic post. 73, Stewart