Sircam Virus

[WhipLash]

This new virus was featured on RTE news last night. It was quite an informative news feature too.

So has anyone received this virus? I received 2 strange emails into my personal mailbox from a French hotel last week. I had been in contact with this hotel last February. I knew by the file names that they must have been from a dubious origin (a MURPHYS.doc.pif and another similar attachment on the second email). Needless to say I almost opened the MURPHY's.doc.pif attachment, until I noticed at the last minute that it wasn't actually a document at all!! Phew!

[WhipLash]

Looks like this virus is spreading fast...I received another 8 mails containing the virus today!

Just in case you didn't know, the mail contains the following text, along with an attachment (whatever you do, don't open the attachment!!!)


Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks



If you get a mail like this, then delete it!

[BrianS]

I've dealt with a lot of customers who have been infected with this and its a bit of a heartbreaker for people who aren't technical. The virus puts a file in your Recycle bin which contains text that self-replicates itself to such an extent that it will use up all available memory. The virus also modifies the registry such that an infected file is executed every time that you run a .exe file! You need to edit the Autoexec.bat to fix it and a little bit of Reg edit is necessary as well. Still its not as bad (yet) as MTX - remember that one from late last year? Whoever makes these things are smart cookies. Surprisingly this one started in Spain. Its usually USA or Phillipines, with a couple even stemming from India.

More info at:
http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html

Later,
Brian.