Page 1 of 2

VIRUS ALERT!!!!

Posted: Mon Jul 23, 2001 9:43 pm
by Krome
Do not open any mails that come through with this message :

Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks



Just a warning..did not hit me but did a few friends of mine.

Virus advice

Posted: Tue Jul 24, 2001 5:40 am
by Ned
Never open an email from someone you don't know and watch for duplicated mail from people you do. Simple.

Re: Virus advice

Posted: Tue Jul 24, 2001 1:45 pm
by Chanta Rose
I was hit by this one and it is nasty, I have lost a lot of my documents, pictures, etc and have been up for hours to finally get to the point now where everything is reinstalled, etc. This is a 'worm' virus and there are warnings plastered all over the front page of the mcafee website. Since fixing it I have been sent the virus 3 more times but I am abviously a lot wiser now!
Most of my work is from the internet, messageboards, etc so everyday I receive mail from people I don't know and although I update my antivirus software regularly it is not enough.

Re: VIRUS ALERT!!!!

Posted: Tue Jul 24, 2001 2:21 pm
by joe king
what is the attachment like (*.exe ?)

Re: VIRUS ALERT!!!!

Posted: Tue Jul 24, 2001 2:43 pm
by joe king
mcaffe.com says (if i understand correctly)
The virus is called 'W32/SirCam@MM'.
'Attached will be a document with a double extension (the filename varies). The first extension will be the file type which was prepended by the virus. When run, the document will be saved to the C:\RECYCLED folder and then opened while the virus copies itself to C:\RECYCLED\SirC32.exe folder to conceal its presence and creates the following registry key value to load itself whenever .EXE files are executed: '

('when run')

Stupidy knows no bounds.

Re: VIRUS ALERT!!!!

Posted: Tue Jul 24, 2001 2:44 pm
by joe king
or is that 'stupidity'

E-mail addresses please

Posted: Tue Jul 24, 2001 3:51 pm
by webmaster
I have had this file sent 15 times today and the guy uses 2 e-mail addresses from ntlworld....I have spoken to NTL and they are looking into it...If you have received this file and the e-mail is different from the two below please let me know....

esprit@ntlworld
andmax@ntlworld

Thanks

Re: E-mail addresses please

Posted: Tue Jul 24, 2001 4:08 pm
by JHseeker
I think that a lot of these viruses prey on weaknesses in Microsoft Office, and up-to-date virus files won't help. This may be the case with this one.

Massive downloads are needed to update office (Service Release 2 for 2000) but it's less time than re-building yer life after a wipe-out. I'm no expert but it happened to me. I found out the hard way about a year ago. Since keeping Office up to date I've caught several before they bite and never been infected.

If you haven't got time to update then turning off your preview pane in Outlook/Outlook Express helps as a short term fix (I think).

Hope this helps and apologies for stretching out a somewhat off-topic thread but don't want people in the forum falling prey.

Re: E-mail addresses please

Posted: Tue Jul 24, 2001 8:36 pm
by phinndick
I had the worm virus sent to me via various friends.
I found a fix at symantec homepage
so far so good

Re: E-mail addresses please

Posted: Wed Jul 25, 2001 6:50 am
by Callipygea
It's a good idea not to use Outlook for your email as many viruses are aimed specifically at Microsoft, in particular the address book Outlook uses.