RE: Win32.Sircam.Worm Alert.....

From: Kyle Plate (kyle@CLASSIFIEDTECHNOLOGIES.COM)
Date: 07/26/01 

Message-ID: <81AABF93912A274F9A8C8988B3CED8BD150155@cliff.theflyer.net>
From: Kyle Plate <kyle@CLASSIFIEDTECHNOLOGIES.COM>
To: "'vuln-dev@securityfocus.com'" <vuln-dev@securityfocus.com>, "'SECURITY-BASICS@securityfocus.com'" <SECURITY-BASICS@securityfocus.com>
Subject: RE: Win32.Sircam.Worm Alert.....
Date: Wed, 25 Jul 2001 18:04:20 -0400

FYI:

Using Symantec's NAV for Exchange (Virus def: 7/18/01 12:00am) has been
successful for us in detecting and moving to quarantine all Sircam infected
messages that have been sent to our server.

-----Original Message-----
From: Jeremy Rodriguez [mailto:jrodriguez@intellinet-tech.com]
Sent: Wednesday, July 25, 2001 9:19 AM
To: Tom Geldner; 'Johnson, Greg'; vuln-dev@securityfocus.com;
SECURITY-BASICS@securityfocus.com
Subject: RE: Win32.Sircam.Worm Alert.....

Yesterday the worm infected 3 of our systems. Just to test I downloaded it,
save it a specific folder and scanned it with Norton's (using the latest
defs) and to my suprise it did not pick it up.
The fix Symantec has:
http://www.sarc.com/avcenter/FixSirc.com

Did find the worm and repair it.

Relevant Pages

  • RE: Win32.Sircam.Worm Alert.....
    ... successful for us in detecting and moving to quarantine all Sircam infected ... messages that have been sent to our server. ...
    (Vuln-Dev)
  • How to detect if cookies are enabled?
    ... of detecting if cookies are enabled - on server side, and without moving ...
    (microsoft.public.inetserver.asp.general)
  • How to detect if cookies are enabled?
    ... of detecting if cookies are enabled - on server side, and without moving ...
    (microsoft.public.scripting.vbscript)
  • Re: SBS 2003 SP1 disk filling up.
    ... I planned on moving the Exchange databases tomorrow. ... Moving Data Folders for Windows Small Business Server 2003 ... How to Move the Client Programs Folder to Another Location in Windows Small ...
    (microsoft.public.windows.server.sbs)
  • Re: Virus officexp-KB910721-FullFile-ENU.exe
    ... being dropped by exchange and won't even reach the mailboxes, ... It is the Sophos AV client that is detecting those files and giving the ... I would move the Attachment Quarantine to a dedicated place so you can also ... the server to regularly scan all files in that folder. ...
    (microsoft.public.windows.server.sbs)