Vulnerability Development mailing list archives

Re: Win32.Sircam.Worm Alert.....


From: Kimberly Anne McKinnis <elf () nauticom net>
Date: Tue, 24 Jul 2001 12:25:09 -0400

Actually... the subject is random. The body, however, is consistent. See these
sources for more info:

http://www.symantec.com/avcenter/venc/data/w32.sir cam.worm () mm html

http://vil.mcafee.com/dispVirus.asp?virus_k=99141&;

http://www.antivirus.com/vinfo/virusencyclo/defaul t5.asp?VName=TROJ_SIRCAM.A

http://www.antivirus.com/vinfo/virusencyclo/defaul t5.asp?VName=TROJ_SIRCAM.A

http://www.sophos.com/virusinfo/analyses/w32sircam a.html

http://www.europe.f-secure.com/v-descs/sircam.shtm l

http://service.pandasoftware.es/servlet/panda.pand
aInternet.EntradaDatosInternet?operacion=FichaViru
s&idVirusFicha=1911&pestanaFicha=1

http://support.centralcommand.com/cgi-bin/command.
cfg/php/enduser/std_adp.php?p_refno=010718-000010

rudi carell wrote:

..subject varies between

"Wedding List"

and

"Reference Letter Peggy"

yfyi.

rc

Friday morning I recieved an email from a friend,  it looked as >though he
was sending me a .doc to look over. To my dismay, it was a worm that >had
infected him.

I have found little information about this worm,  Mostly located at
http://www.symantec.com/avcenter/venc/data/w32.sircam.worm () mm html

The Worm will come from someone that has you on there contact list, >and
will
have a differnt subject line determined by the attached file.

The text will read in english as:

Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks


rudicarell () hotmail com
security () freefly com
http://www.freefly.com/security/

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

--
kimmie mckinnis
http://www.starjewel.org
icq:186072/aol:starbreiz



Current thread: