SirCam is a new email worm virus that was just discovered in the on July 17, 2001. The virus replicates itself though the victim's Outlook or Outlook Express, sending itself to addresses listed on the victim computer's address book and other files on the hard drive. The worm arrives through e-mail in the following format:
Subject: (The subject line will be random)
Body: Hi! How are you?
See you later. Thanks
Attachment: (Same as Subject: line + containing a double extension, ie. COM.EXE)
Reviewing (Jul 31, 2001)
I give it a 4 considering it gets rid of the worm (assuming it does?) but I prefer the Symantec version... Norton has save my @$$ more than once, especially with the rescue disk when I forget to turn on auto protect again (CIH virus was the worst, where rescue disk saved me). But yeah, if this works, good program..............
Reviewing (Jul 30, 2001)
I recieved this message in my Inbox at 5:09PM CST:
From: Harold Jackson
To: lilmegz@qwest.net
Subject: CTP Golf Sign Up Sheet
Content-Type: text/plain; charset=ISO-8859-1
Content-Disposition: message text
Hi! How are you?
I send you this file in order to have your advice
See you later. Thanks
CTP Golf Sign Up Sheet.doc.pif
Reviewing (Jul 30, 2001)
Not a review of the program, as I recognized the double file extension as being trouble from the get go, but I do want to correct something - the virus/worm DOES NOT use Outlook or OE to resend its payload, as it has its own built in email client. It DOES use the Windows address book, which Outlook and OE also use.
Reviewing (Jul 30, 2001)
If you haven't downloaded the attachment, then it is still on the Hotmail server(s), so of course the trojan killer was unable to locate it or remove it.
Also, the description of Sircam as given here is woefully inadequate. Note: This is not a comment of the trojan killer, which may work brilliantly.
Reviewing (Jul 29, 2001)
it might not work w/ Hotmail... if you're going via the web.. is that what you're doing?
No comments yet