Beware New Virus

blade · Post by **blade** » Sat Jul 21, 2001 2:43 pm

Some dumb shit sent me a 4.18 meg file so I had to forward it to another free web email, since I can't receive large files on my dial up. I figured it was just another on cable who assumes everyone has cable.

But it's a virus. Others have received similar so you all need to be warned.

Here is the email:

Adam Cohen "acohen1@speakeasy.net"

Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks
the attachement read: Clad20FULL.zip

here's the virus results using yahoo's online norton virus scan:

Virus W32.Sircam.Worm@mm found. File NOT cleaned.
This file contains a computer worm, a program that spreads very quickly over the Internet to many computers and can delete files, steal sensitive information, or render your machine unusable.

This attachment has a virus that may infect your computer. It cannot be cleaned.
We recommend that you DO NOT download this attachment.

Post by **sbp** » Sat Jul 21, 2001 3:25 pm

Instructions on how to remove this virus: http://www.symantec.com/avcenter/venc/d ... rm@mm.html

<A href="http://www.zdnet.com/zdnn/stories/news/ ... 23,00.html" target="_new' title=" 'Network-aware' virus on the loose"><b>'Network-aware' virus on the loose</b></a>

"A new virus that has the capability of attacking any machine attached to an infected network is on the loose.

Known as the Sircam.A virus, it is part of a new class of viruses dubbed "network-aware" for their ability to check for shared or mapped drives, and then spread themselves to other networked machines.

Anti-virus vendor Symantec Corp. said it had received more than 40 reports of infections from corporate customers as of 4:30 p.m. EDT Thursday.

The virus, first spotted on Wednesday, has already risen to the number three spot on Trend Micro Inc.'s list of the top 10 virus threats.

In addition to searching for other networked PCs, Sircam also sends copies of itself to every address in a user's Microsoft Outlook mailbox, a behavior that by now is all too familiar to network administrators. It arrives in a user's inbox with a random subject line and an attachment with the same name as the subject line, according to Trend Micro.

Officials at McAfee.com Inc., another anti-virus company, said they had also observed the Trojan hiding itself in the recycle bin on users' desktops, a place where most anti-virus software packages don't look during their scans.

The e-mail may also arrive in Spanish, and McAfee officials said they believe it originated in South America."

blade · Post by **blade** » Sat Jul 21, 2001 3:28 pm

Just received another to a different email, that tells me this person is watching here. From the same name and email but this times it's a 2.66 meg file called Baldur2faq.doc.com

You don't open these files you'll have no problems. Just delete delete.

NascarFool · Post by **NascarFool** » Sat Jul 21, 2001 3:41 pm

Originally posted by blade
Just delete delete. [/B]

Uhoh, it's the dreaded double delete. LOL

Post by **FlyingPenguin** » Sun Jul 22, 2001 7:23 am

Just got my 1st one!

JonasWorld · Post by **JonasWorld** » Sun Jul 22, 2001 10:26 pm

I just recieved the "I send you this file in order to have your advice" to my hot hotmail inbox. I recieved it from lisapsu @ home . com

I thought it was weird that the sender's adress has PSU in it since I go to Penn State however I don't recognize it from anyone I know. And it is not an oficial PSU adress.

Thanks again for the heads up. I probably wouldn't have opened without knowing the adress anyway but now I can warned my Dad.

Slugbait · Post by **Slugbait** » Tue Jul 24, 2001 1:50 am

"I send you this file..." (present tense, should be past tense)
"...to have your advice" (incorrect use of a participle)

Oh, for Christ's sake, why can't people figure out that the most heinous virii are spread by email of which contains text that does not conform to standardized English? It's just as obvious as the bogus virus warning email that starts out in all caps, "Warning...don't open this email!"

Trust me...if the body of the mail reads as if it were translated from Japanese, and it's not from a moron you regularly receive mail from, just assume it's a virus or a trojan or a worm.

Phjorg · Post by **Phjorg** » Tue Jul 24, 2001 6:06 am

interesting... I've been using my hotmail for over 2 years now and using email for over 5 and today i just had my first email virus sent to me to my hotmail account! not only that, an hour later i got another one!!! Both from the same person, but different messages.. (never checked the attachments, but they both end in .com) crazy....

Zyph · Post by **Zyph** » Tue Jul 24, 2001 8:50 am

Well, the part of the e-mail message that is not correct english is because it originally was in Spanish, so it's translated. (If you go to Norton/Symantec's webpage, it shows both the english and spanish versions....still wierd.)

wvjohn · Post by **wvjohn** » Tue Jul 24, 2001 1:51 pm

it's still going around - i got 3 this morning

JonasWorld · Post by **JonasWorld** » Tue Jul 24, 2001 2:57 pm

Chalk another one up for as well.

Post by **FlyingPenguin** » Tue Jul 24, 2001 8:29 pm

I'm up to 20 - 5 from the same dude.

PCA Forums

Beware New Virus

Beware New Virus

Thanks for the warning!!!

That makes two!