SirCam Virus

quote:

---

The cardinal EMAIL RULE:

"Be wary of all unsolicited attachments.
If you don't need it or aren't expecting
it, don't launch or open it."

---

A recent and nasty virus is called SirCam, it can mail out randomly
selected documents from your computer to everyone on your email address
book. I think that this is the Windows address book.

see: http://www.sophos.com/virusinfo/articles/sircama.html Link and
http://www.sophos.com/virusinfo/analyses/w32sircama.html Link

If you see an email looking like that described below, delete it
completely, do NOT open any attachments that it has.

How to recognise it:

Depending on the operating system default language every email message
sent by the worm will always contain identical first and last lines.

If the default language is English, the first line of the message will
be:

"Hi! How are you?"

It then chooses one of the following four sentences as the next line of
the message:

"I send you this file in order to have your advice"

"I hope you like the file that I sendo you"

"I hope you can help me with this file that I send"

or

"This is the file with the information you ask for"

The last line of the message always reads:

"See you later. Thanks".

If the default language is Spanish, the first line of the message will
be:

"Hola como estas ?"

It then chooses one of the following four sentences as the next line of
the message:

"Te mando este archivo para que me des tu punto de vista"

"Espero te guste este archivo que te mando"

"Espero me puedas ayudar con el archivo que te mando"

or

"Este es el archivo con la informacion que me pediste"

The last line of the message always reads:

"Nos vemos pronto, gracias.".

On 16 October there is a 1 in 20 chance that the worm will attempt to
delete all files from the hard drive.

Bill

Revised on 9 Aug 2001