Hello Mark
Thanks very much for information on what to do if infected by this virus. I
consider myself to be bereft of knowledge when it comes to operating
computers, but have tried to buck up my ideas since becoming infected with a
virus a year ago. Trying not to get too paranoid though :-)
Best
Gerald
-----Original Message-----
From: Mark Dean <[log in to unmask]>
To: [log in to unmask] <[log in to unmask]>
Date: 20 July 2001 18:06
Subject: Re: Virus Alert W32/SirCam@MM (Sir Cam Virus)
To reinforce this warning. We have had an outbreak on campus here at
Kent. The message body was perfect bait for academics expecting
dissertations from students at this time of the year. Your machine gets
infected if you open the attachment. It also got through our anti virus
system.
NOTES
1 This virus sends out infected e-mails independently of whether you
have your email open so you will not necessarily know about it until
someone writes back.
2 It randomly selects files from your "my documents" folder and
subfolders to email to people in your address book so there is a
potentially serious issue of confidential material getting sent to
anyone in your address list. The files it sends are infected but can be
read as normal documents.
3 If you suspect you have been infected go to:
Start/find/files or folders and search your hard drive for a file called
SirC32.exe, if you find that file contact your anti virus support but be
aware that you will be sending out infected e mails all the time you are
on line. So move any files in "my documents" that you wouldn't want
anyone else to see before you go on line. A nasty one.
Hope that helps
Mark Dean
Kent Law School
IT Officer
-----Original Message-----
From: Discussion on theoretical and research issues in counselling
psychology [mailto:[log in to unmask]] On Behalf Of G.F.
Phillips
Sent: Friday, July 20, 2001 3:44 PM
To: [log in to unmask]
Subject: Fw: Virus Alert W32/SirCam@MM (Sir Cam Virus)
Hello Folks
It's virus time again. Thought you'd like to know.
Best
Gerald
-----Original Message-----
From: McAfee.com Dispatch <[log in to unmask]>
To: [log in to unmask] <[log in to unmask]>
Date: 20 July 2001 05:59
Subject: Virus Alert W32/SirCam@MM (Sir Cam Virus)
(((((((((((((((((( McAfee.com Dispatch )))))))))))))))))))))
------------------------------------------------------------
**VIRUS ALERT - W32/SirCam@MM (Sir Cam Virus)**
------------------------------------------------------------
[This message is brought to you as a subscriber to the McAfee.com
Dispatch. To unsubscribe, please follow the instructions at the bottom
of the page.]
McAfee.com has seen a large and growing number of consumer computers
infected with [log in to unmask] This is a HIGH RISK VIRUS FOR CONSUMERS.
The infected email can come from addresses that you recognize. Attached
is a file with two different extensions. The file name itself varies.
The email message can appear as follows:
Subject: [filename (random)]
Body: [content varies]
Hi! How are you?
I send you this file in order to have your advice
or I hope you can help me with this file that I send
or I hope you like the file that I sendo you
or This is the file with the information that you ask for
See you later. Thanks
--- the same message may be received in Spanish ---
Hola como estas ?
Te mando este archivo para que me des tu punto de vista
or Espero me puedas ayudar con el archivo que te mando
or Espero te guste este archivo que te mando
or Este es el archivo con la información que me pediste
Nos vemos pronto, gracias.
The virus searches for .GIF, .JPG, .JPEG, .MPEG, .MOV, .MPG, .PDF, .PNG,
.PS, and .ZIP files in the MY DOCUMENTS folder and attempts to send
copies of these documents to email recipients found in the Windows
Address Book and addresses found in cached files.
For detection and removal instructions for the Sir Cam Virus, click
here.
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2371
McAfee.com VirusScan Online and Clinic subscribers:
If you don't have ActiveShield installed and updated, you
are not protected from this virus. Click here to download ActiveShield.
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2372
Retail VirusScan Users:
Version 4.0.70 and above with DAT file 4148 will detect and remove this
virus. To download the latest DAT files, click here.
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2253
____________________________________________________________
If you would like to receive the McAfee.com Dispatch in a graphical
(HTML) format in the future, please click here.
-> http://dispatch.mcafee.com/default2.asp?id=1343455
________________________Virus Fixes_________________________
Find out more about this virus. Click here to go to the W32/SirCam@mm
Help Center.
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2371
Become a McAfee.com subscriber and check your system online. Click here.
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2377
Buy the latest VirusScan in the McAfee Store! Click here.
->
http://mcafeestore.beyond.com/AF77887-VS_700/Product/0,1057,3-18-SN10192
4,00
.html
Is your VirusScan current? Purchase the VS Maintenance Plan
for $22.45 (USD) and upgrade to the most current version.
Click here.
->
http://mcafeestore.beyond.com/AF77887-SMP_400/Product/0,1057,3-18-SN1028
99,0
0.html
Download the latest DAT files, click here.
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2253
_____________________Anti-Virus Tips!_______________________
Find out how to detect and prevent viruses with these handy tips. Click
here.
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=1589
______________________Special Offers_________________________
SAVE UP TO 33% on security for your computer AND get 20 hot songs from
MP3.com. Click here.
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2366
Get a 2-year subscription of VirusScan Online now only
$39.90 (USD)! SAVE $10! Click here.
-> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2367
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[ You are currently subscribed as: [log in to unmask] ]
McAfee.com Support: To contact us about this dispatch, click here.
-> http://www.mcafee.com/support/cust_serv/default.asp
Subscribe: If you received this message from a friend and
would like to subscribe to McAfee.com Dispatch, click here.
-> http://dispatch.mcafee.com/sub.asp?s=22
Unsubscribe: If you do not wish to receive email, click here.
-> http://dispatch.mcafee.com/unsub.asp
Note: Promotions are subject to change without notice.
Click here to view our permission policy.
-> http://dispatch.mcafee.com/permission_policy.asp
Trademarks 2001 McAfee.com Corporation / All Rights Reserved.
|