Sharechat Logo

Forum Archive Index - July 2001

Please note usage of the Forum is subject to the Terms & Conditions.

 
Messages by Date [ Next by Date Previous by Date ]
Messages by Thread [ Next by Thread Previous by Thread ]
Post to the Forum [ New message Reply to this message ]
Printable version
 

Re: [sharechat] Off Topic -- Virus Alert !!!


From: "Chris Castle" <c.castle@paradise.net.nz>
Date: Wed, 25 Jul 2001 22:48:43 +1200


I've had four today from widely varying sources but two included jpg (graphics) files with provocative titles  - I reiterate Grant's advice with bells on. Norton Antivirus 2001 picked it up on arrival.
----- Original Message -----
Sent: Wednesday, July 25, 2001 9:42 PM
Subject: [sharechat] Off Topic -- Virus Alert !!!

Is anyone else getting hit by viruses today?
In the last 24 hours I have received 5 copies of a particular virus, e-mailed to various mailboxes within our company.
 
The subject line varies but the message body is always the same:

Hi! How are you?
 
I send you this file in order to have your advice
 
See you later. Thanks

If you receive a message like this, it contains a payload called the SirCam virus held in an attachment which takes various forms appearing as an Excel Spreadsheet (.XLS) or Word Document (.DOC).
 
Actually, there is a hidden shortcut extension following this, and the file is really a Windows Executable.
If you open it, the virus will send copies of various files it finds in your "My Documents" folder.
The files will be e-mailed to everybody in your Address Book (nice).
Also, the virus looks for files cached by your Internet Browser, and examines those for e-mail addresses.
If it finds a valid e-mail address in the browser cache, the files from "My Documents" will be sent to those addresses as well.
 
This is no hoax!  Details are on McAfee's web site at:  www.mcafee.com
I have examined the code with a Hex Editor, and it has been written in Borland Delphi.
This is not the usual script-kiddie attack -- this one is much more serious.
 
It is quite hard to get rid of once your PC is infected.
So I suggest DELETING it immediately.
Whatever you do, DON'T open the attachment.
 
Cheers

Grant Keymer
____________
 
 

References

 
Messages by Date [ Next by Date: Re: [sharechat] Growth & Value tennyson@caverock.net.nz
Previous by Date: [sharechat] Off Topic -- Virus Alert !!! Grant Keymer ]
Messages by Thread [ Next by Thread: Re: [sharechat] Off Topic -- Virus Alert !!! Murray McLean
Previous by Thread: [sharechat] Off Topic -- Virus Alert !!! Grant Keymer ]
Post to the Forum [ New message Reply to this message ]