From philpem@btinternet.com Sun Dec 17 09:24:51 2000
Newsgroups: alt.comp.virus
Subject: ANN: How to block the Hybris (aka "Snowhite") worm's posts
From: "Philip Pemberton" <philpem@btinternet.com>
Date: Sun, 17 Dec 2000 17:24:51 -0000

Hi All,
    Anyone heard of the Hybris worm? Peed off with all those posts? Here's a
list of all the e-mail addresses it seems to be using for NG postings:

mix@mix2.hyperreal.pl
septic@home.com
no.user@anon.xg.nu
nobody@remailer.ch
animetet@mixmaster.shinn.net
Use-Author-Address-Header@[127.1]
nobody@noisebox.remailer.org
nobody@generalprotectionfault.net
nobody@remailer.privacy.at
nobody@dizum.com
juicy@melontraffickers.com

And the from address for the "Snowhite turns 18" e-mails:
hahaha@sexyfun.net

Add these to your killfile - I have - you still have to sit through the
header download but the messages won't appear. Outlook/Outlook Express have
the "Blocked Senders" list (Tools -> Message Rules -> Blocked Senders). I
think Forte Free Agent and Netscape Messenger can do it too.

--
Phil.
http://www.philpem.f9.co.uk/
philpem@bigfoot.com