[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

strange emails (Sircam.Worm)



Mr. Webb,

It certainly was the Sircam.Worm. You were wise to delete it. It hit our
company too, but fortunately, I was able to get a warning (see below) out to
our staff  before it wrecked any havoc. It is a worm that wears several
different masks (it morphs) therefore, you might want to take a moment to
read about the pathology of this virus as follows:

______________________________________________________________________
I received a urgent Virus Alert this morning. The W32.Sircam.Worm is an
actual virus, not a hoax.
Messages containing the W32.Sircam.Worm.Have come from North and South
America, Europe and East Asia, so the distribution appears to be extensive.
It copies itself by accessing a local address book and sending emails to a
certain number of people within that address book. CONSEQUENTLY, A
VIRUS-CONTAINING MESSAGE CAN ARRIVE FROM SOMEONE YOU KNOW.

The Subject line of the email will be random, and will be the same as the
file name of the attachment in the email.

The Message body will be semi-random, but the message body will always
contain one of the following two lines (either English or Spanish) as the
first and last sentences of the message.

Spanish Version:
First line: Hola como estas ?
Last line: Nos vemos pronto, gracias.

English Version:
First line: Hi! How are you?
Last line: See you later. Thanks

IF ANY OF THESE ENGLISH OR SPANISH PHRASES APPEAR IN THE MESSAGE BODY:
DELETE THE ENTIRE MESSAGE, INCLUDING ITS' ATTACHMENT IMMEDIATELY !!!

The attached files have been listed variously as 124Kb, 116Kb, etc. and all
are identified as MIXED.
This worm also acts as a virus with a  potential of inflicting serious
damage on your computer. Since it was first reported on 17 July, you may not
yet have updated your anti-virus software so that it can recognize infected
files.
Further information is available at:
http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html
<http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html>
Be alert!!!!


TGrunewald@QuadrigaArt.com <TGrunewald@QuadrigaArt.com>

Theodore Grunewald
Chief Archivist

Quadriga Art, Inc.
Reproducta Co., Inc.
Executive Headquarters
30 East 33rd Street
New York, NY 10016

(212) 685-0751
(212) 889-6868 fax

A posting from the Archives & Archivists LISTSERV List!

To subscribe or unsubscribe, send e-mail to listserv@listserv.muohio.edu
      In body of message:  SUB ARCHIVES firstname lastname
                    *or*:  UNSUB ARCHIVES
To post a message, send e-mail to archives@listserv.muohio.edu

Or to do *anything* (and enjoy doing it!), use the web interface at
     http://listserv.muohio.edu/archives/archives.html

Problems?  Send e-mail to Robert F Schmidt <rschmidt@lib.muohio.edu>