Re: Win32.Sircam.Worm Alert.....

From: Kimberly Anne McKinnis (elf@nauticom.net)
Date: 07/24/01 

Message-ID: <3B5DA165.21509F38@nauticom.net>
Date: Tue, 24 Jul 2001 12:25:09 -0400
From: Kimberly Anne McKinnis <elf@nauticom.net>
To: rudi carell <rudicarell@hotmail.com>
Subject: Re: Win32.Sircam.Worm Alert.....

Actually... the subject is random. The body, however, is consistent. See these
sources for more info:

http://www.symantec.com/avcenter/venc/data/w32.sir cam.worm@mm.html

http://vil.mcafee.com/dispVirus.asp?virus_k=99141&

http://www.antivirus.com/vinfo/virusencyclo/defaul t5.asp?VName=TROJ_SIRCAM.A

http://www.antivirus.com/vinfo/virusencyclo/defaul t5.asp?VName=TROJ_SIRCAM.A

http://www.sophos.com/virusinfo/analyses/w32sircam a.html

http://www.europe.f-secure.com/v-descs/sircam.shtm l

http://service.pandasoftware.es/servlet/panda.pand
aInternet.EntradaDatosInternet?operacion=FichaViru
s&idVirusFicha=1911&pestanaFicha=1

http://support.centralcommand.com/cgi-bin/command.
cfg/php/enduser/std_adp.php?p_refno=010718-000010

rudi carell wrote:

> ..subject varies between
>
> "Wedding List"
>
> and
>
> "Reference Letter Peggy"
>
> yfyi.
>
> rc
>
> >Friday morning I recieved an email from a friend, it looked as >though he
> >was sending me a .doc to look over. To my dismay, it was a worm that >had
> >infected him.
> >
> >I have found little information about this worm, Mostly located at
> >http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html
> >
> >The Worm will come from someone that has you on there contact list, >and
> >will
> >have a differnt subject line determined by the attached file.
> >
> >The text will read in english as:
> >
> >Hi! How are you?
> >
> >I send you this file in order to have your advice
> >
> >See you later. Thanks
> >
>
> rudicarell@hotmail.com
> security@freefly.com
> http://www.freefly.com/security/
>
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp 

--
kimmie mckinnis
http://www.starjewel.org
icq:186072/aol:starbreiz

Relevant Pages

  • Re: Win32.Sircam.Worm Alert.....
    ... The body, however, is consistent. ... rudi carell wrote: ... >>Friday morning I recieved an email from a friend, ... >>The Worm will come from someone that has you on there contact list,>and ...
    (Vuln-Dev)
  • Re: Melvin Tan case
    ... The liar truth is the most consistent ... I am not so cheapskate as bacterium and worm. ...
    (soc.culture.singapore)
  • Re: [Full-Disclosure] New variant of Nachi ?
    ... > Our analysts are aware of a worm actively exploiting flaws ... > This worm activity is consistent with a variation of the Nachi or ...
    (Full-Disclosure)
  • Re: Worm identity?
    ... >The sequence is pretty consistent, and repeats non-stop with about a ... >five-second lag between attempts. ... That's not one worm, that's a whole host of them. ...
    (comp.security.firewalls)