posted on February 21, 2001 07:11:02 AM
Can someone tell me what the Snow White Virus was/is?
I got an email this morning titled Snow White And The Seven Dwards and the sender was "hahahahaha". I immediately deleted it but was wondering what exactly it was.
posted on February 21, 2001 07:15:04 AM
It's a virus that has been annoying me daily for a couple months now and I wish I knew what I had to do to get rid of it!
Edited to clarify: I don't actually "have" the virus - but I get that email daily.
[ edited by ExecutiveGirl on Feb 21, 2001 07:15 AM ]
posted on February 21, 2001 07:22:23 AM
Me too!! And its a pain in the A_____! Definitely don't open it...I don't "have" it either but it keeps popping up on the Norton ....
posted on February 21, 2001 07:35:46 AM
Thanks, reddeer. Boy, that doesn't give me much confidence in my new Norton 2001. I've updated my definitions, too.
posted on February 21, 2001 08:22:33 AM
We have Inoculate in one of our home computers (the one we were using the most) and so far we have not received the Snow White virus. It was coming into our computer at work several times a day and we had Mcafee in that one. So we downloaded Inoculate in it a few weeks ago and haven't had the virus since.
I got a new computer a few weeks ago which has Nortons 2001 and I barely turned it on and one of the first e-mails I got was the Snow White virus. It is coming in about twice a day but Nortons warns me each time and I can quarantine it or delete it.
posted on February 21, 2001 08:37:03 AM
I have the greatest little ISP. I refer to them as "2guys & a girl" (that's litterally what it is). They installed a virus filter that let's nothing through. I get an email telling me who sent me an infected email and the sender gets one telling them they are infected. IF I really need to make contact with the sender, they provide a link that lets me send and receive a message from them EVEN if they have not yet been "cured". It's kinda like talking at the back fence. I can't save the message, but at least I can make contact if I need to.
posted on February 21, 2001 08:57:03 AM
Although I feel somewhat left out because no one has sent me the snow white thing, NOT, I have tons of faith in Norton's. Have 2001 SystemWorks & Firewall, both of which are excellent! Just keep those updates done! I learned that after I got rid of that worthless McAfee.
posted on February 21, 2001 09:09:43 AM
Heya Toke,
I'm not even sure why Norton's should catch this email, or why it would quarantine it?
The virus is sent as an exe attatchment, so unless you click on the attachment, it won't be a problem.
Now with the Kak bug, that's quite different, all you need to do is open the email & shazam, you got it. Norton's catches all those for me & sends them directly to quarantine.
I still think Norton's offers the best bang for the buck.
posted on February 21, 2001 09:36:14 AM
AHA! Thanks again, reddeer...that's what I was wondering about.
I can't figure out how to set up my email so Norton can screen it as it comes in. I guess I need to go to their Support.
After I got the Kakworm from eBay (deleted it with Housecall), I got nervous and bought Norton SystemWorks, which includes their anti-virus. Won't work with my particular email system, though...
posted on February 21, 2001 10:13:04 AM
An interesting twist on this one.....
apparently this one doesn't replicate by sending the virus to all of the addresses in the unwary sender's address book. Instead, each time the infected unknowing user tries to send an individual email to someone, he/she sends this snow white email with the attachment instead. The return address is bogus.
This is important for this reason-- if you were expecting an email from a friend or customer, and it never arrived, it might have been that the sender was infected and it arrived as the snow white virus instead.
Like many of these things, they don't know they are infected.
posted on February 21, 2001 10:46:04 AM
We run Norton, have four about 4 years and update regularly and have had absolutely NO problem with this or any other virus, ever! But you have to run your Norton, and you have to keep it updated.
We have 4 computers, and we have a standing rule, you don't open mail, particularly those with attachments if you don't know the sender. We use Outlook express on all of our computers, and you don't have to open an e-mail to see what it is about - it is easy to view unopened.
If someone sends us an attachment which I think I am interested in, I don't open the e-mail but just hit reply, and tell the person that we would like to read about (whatever) but that we don't open attachments, so please send via regular e-mail.
posted on February 21, 2001 11:36:36 AM
Thanks for trying, reddeer. Mine is a little different, but the upshot is that it says "no email clients are detected." It's supposed to support Netscape Messenger 4.X, so it should work for me... I have two, a netscape.net email for the boards, and a mediaone.net for business. I can't imagine why they don't show up.
I clicked the "manually configured" option, but nothing changed. I restarted, just in case, but nada. I'm going to go to Symantec and see what I can find.
posted on February 21, 2001 12:31:30 PMreddeer!...
I went to Symantec and your idea was right on. The only difference was that I had to actually configure a new server name and add an address to my user name, manually. Thanks for the goose in the right direction...
posted on February 21, 2001 02:10:48 PM
I received no less than four Snow White E-mails today, but all of them were totally different. One contained a .EXE file, two contained a .SCR file and the last one, which was received just five minutes ago, was entirely in French with the subject "Les 7 coquir nains". Even the .EXE file is in French...
posted on February 21, 2001 04:03:34 PM
I got infected by this piece of %#@! a couple of months ago. My SPAM filters automatically deleted the message itself, so I never saw it, but the actual virus was still downloaded to my attachment directory. I was going through that directory, trying to delete the attachments I didn't want to keep, and I stupidly clicked on the virus to see what it was. Nothing happened [or so I thought], but the next time I sent somebody an e-mail and then logged off the Internet [I didn't have DSL then], my e-mail program mysteriously reconnected on its own! It didn't take me long to figure out what had happened...
Anyway, I downloaded a copy of that Innoculate program and let it have its way with my computer. It found the infected wsock32.dll file, but unfortunately it simply DELETED it instead of repairing it, which then meant I was completely unable to connect to the Internet at all! Fortunately, I was able to download a "fresh" copy of the file from a friend's computer, but what a pain!!!
Barry
---
The opinions expressed above are for comparison purposes only. Your mileage may vary....
