SirCam virus

[Norman Bauman nbauman@xxxxxxxx]

That's the SirCam virus.

http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@xxxxxxxx

Tue, 7 Aug 2001 11:14:55 +-400
From: "CLARISSA"
To: xywrite@xxxxxxxx
Subject: expenses - Mike Perry new
date: Tue, 7 Aug 2001 10:16:57 -0400
MIME-Version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-Mailer: Microsoft Outlook Express 5.50.4133.2400


Good thing I'm using Eudora, not Outlook Express, so I didn't run it
automatically. (I don't think.)

Is there any easy way to tell whether my computer has been infected with
the SirCam virus?

As I understand the Symantic writeup, it copies the original file, and
creates a file called Sirc32.exe among others, so if I search my hard drive
and don't have those, I'm OK. Right?

Norman


At 03:13 PM 8/7/01 -0400, Jay McNally wrote:
>
>VIRUS ALERT
>
>
>I just got what is most likely a virus via this list.... DO NOT OPEN IT !!!!!
>
>When these unknowns are sending files with unheard of extensions and asking
>your advice, be wary.
>
>At 10:16 AM 8/7/01 -0400, you wrote:
>>Content-Type: text/plain; charset=ISO-8859-1
>>Content-Disposition: message text
>>
>>Hi! How are you?
>>
>>I send you this file in order to have your advice
>>
>>See you later. Thanks


-------------------------------------------------------
Norman Bauman
411 W. 54 St. Apt. 2D
New York, NY 10019
(212) 977-3223
http://www.nasw.org/users/nbauman
-------------------------------------------------------