[lug] Email address harvesting at lug?

[John Starkey]

I had an issue on another list where I hadn't seen it for a month or so and
someone posted a message, I followed up, and next thing i know it's in my box 4
times that night. Twice from a dialup and once each from two different static
origins.

Is it possible this thing can execute, so if someone opens your mail it can
grab the reply to and send a message? If it's on a Winsock (which I really know
nothing about), then does that mean it has to grab an outgoing message? Not a
message being open from the drive?

I've rec'd that thing about 20 times since Thanksgiving.

Thanks,

John

George Sexton wrote:

> This isn't spam, but the Win32Hybris at MM virus. This virus Hooks the victim's
> Winsock, and any time that the victim posts a NNTP message or sends an
> Email, it sends  a copy to the recipient. For more information go to McAfee
> and search for Hybris.
>
> -----Original Message-----
> From: lug-admin at lug.boulder.co.us [mailto:lug-admin at lug.boulder.co.us]On
> Behalf Of Deva Samartha
> Sent: 16 February, 2001 10:38 AM
> To: lug at lug.boulder.co.us
> Subject: [lug] Email address harvesting at lug?
>
> I got spam to an email address exclusively used for lug:
>
> From: Hahaha <hahaha at sexyfun.net>
> Subject: Snowhite and the Seven Dwarfs - The REAL story!
> MIME-Version: 1.0
> Content-Type: multipart/mixed; boundary="--VEQJKHQZ"
> Message-Id: <20010216150456.NGZY19355.mtiwmhc23.worldnet.att.net at default>
> Date: Fri, 16 Feb 2001 15:05:06 +0000
> To: undisclosed-recipients:;
>
> I wonder how this happened since I am not able to even look at the members
> list from the web interface.
>
> Samartha
>
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
>
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug