[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Warning
Regarding the Sircam Virus my machine was infected and it is quiet possible
it might have spread from there, The machine is clean now, I got it from a
guy in Singapore. Below are some details regarding this virus.
Madan Subramanian
Bangalore, India.
----- Original Message -----
From: <customercare at satyam_net.in>
Sent: Friday, July 27, 2001 7:16 PM
Subject: Virus Update
> Dear User,
>
> This is a virus update on a new and deadly virus called "Sircam" virus.
> Please read the mail carefully.
>
> W32.Sircam.Worm@mm
> ------------------
>
> Also Known As: W32/SirCam@mm, Backdoor.SirCam
>
> SirCam is a mass mailing worm uses e-mail addresses stored in Windows
Address
> book and also collects addresses from temporary Internet folder to
distribute
> infected messages. SirCam is also network aware worm. It searches for
network
> shares and infects them too. SirCam arrives as an e-mail attachment,
message
> subject and body varies randomly. The message body first and last line
will be
> the same. The worm will contain two extensions, first will be DOC, XLS,
ZIP and
> EXE and the second extension selected randomly from PIF, LNK, BAT or COM.
>
> First Line: Hi! How are you?
> Last Line: See you later. Thanks
>
> How to Protect your System:
>
> The Virus can be cleaned by scanning the system through the latest
antivirus
> update or through Fire antivirus software(updated).SirCam Worm changes
registry
> keys when infecting the machine and it should be fixed before deleting the
main
> worm file Sirc2.EXE stored in Recycled folder.
>
> Kindly visit http://fireantivirus.com/virusinfo/library/sircam.htm and
fix the
> registry settings by opening SCamFIX.reg file. After fixing the registry
entries,
> run CleanSir.exe link from the site or Fire scanner to remove the worm
components.
> We suggest you contact your hardware vendor should you require any
assistance in
> having your PC innoculated.
>
> Warm regards
> SATYAMONLINE