MDCECIL-L Archives
Archiver > MDCECIL > 2001-07 > 0996032988
From:
Subject: Re: [MDCECIL] I've Never Done This Before, But ....
Date: Tue, 24 Jul 2001 23:49:48 EDT
I am sending what I received from McAfee.com about this virus.
Hope it might help. The best advice is to not open any attachments
if you are not expecting it from someone.
Good luck. Evelyn
Subj: Virus Alert W32/SirCam@MM (Sir Cam Virus)
Date: 7/20/01 4:43:17 AM Eastern Daylight Time
From: (McAfee.com Dispatch)
Reply-to: <A HREF="mailto:"></A> (McAfee.com Dispatch)
To: ()
(((((((((((((((((( McAfee.com Dispatch )))))))))))))))))))))
------------------------------------------------------------
**VIRUS ALERT - W32/SirCam@MM (Sir Cam Virus)**
------------------------------------------------------------
McAfee.com has seen a large and growing number of consumer
computers infected with W32/SirCam@MM. This is a HIGH RISK
VIRUS FOR CONSUMERS. The infected email can come from
addresses that you recognize. Attached is a file with two
different extensions. The file name itself varies.
The email message can appear as follows:
Subject: [filename (random)]
Body: [content varies]
Hi! How are you?
I send you this file in order to have your advice
or I hope you can help me with this file that I send
or I hope you like the file that I sendo you
or This is the file with the information that you ask for
See you later. Thanks
--- the same message may be received in Spanish ---
Hola como estas ?
Te mando este archivo para que me des tu punto de vista
or Espero me puedas ayudar con el archivo que te mando
or Espero te guste este archivo que te mando
or Este es el archivo con la información que me pediste
Nos vemos pronto, gracias.
The virus searches for .GIF, .JPG, .JPEG, .MPEG, .MOV, .MPG,
.PDF, .PNG, .PS, and .ZIP files in the MY DOCUMENTS folder
and attempts to send copies of these documents to email
recipients found in the Windows Address Book and addresses
found in cached files.
For detection and removal instructions for the Sir Cam Virus,
<A HREF="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2371">click here</A>.
McAfee.com VirusScan Online and Clinic subscribers:
If you don't have ActiveShield installed and updated, you
are not protected from this virus. <A HREF="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2372">Click here</A> to download ActiveShield.
Retail VirusScan Users:
Version 4.0.70 and above with DAT file 4148 will detect and
remove this virus. To download the latest DAT files,
<A HREF="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2253">click here</A>.
________________________Virus Fixes_________________________
Find out more about this virus. <A HREF="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2371">Click here</A> to go to the
W32/SirCam@mm Help Center.
This thread: