RE: Win32.Sircam.Worm Alert.....

From: Lamagna, Walter (walter.lamagna@comsat.com.ar)
Date: 07/27/01


Message-ID: <7215324D280ED511A4D4000102BF7FA9D476F6@almaz.comsat.com.ar>
From: "Lamagna, Walter" <walter.lamagna@comsat.com.ar>
To: vuln-dev@securityfocus.com, SECURITY-BASICS@securityfocus.com
Subject: RE: Win32.Sircam.Worm Alert.....
Date: Fri, 27 Jul 2001 17:02:03 -0300

Speaking abaut antiviral products, which properties do you analice to choice
one ? I looked for these : eSafe, Norton Antivirus, F-Secure, Sophos and
PC-Cillin (from Trend Micro).
Are there some links on the web abaut Antiviral benchmak statistics ?

Any information would be useful, thanks.

Walter

> -----Mensaje original-----
> De: DNT [SMTP:dnt@hcm.fpt.vn]
> Enviado el: Viernes 27 de Julio de 2001 6:53 AM
> Para: Chris Freels; vuln-dev@securityfocus.com;
> SECURITY-BASICS@securityfocus.com
> Asunto: Re: Win32.Sircam.Worm Alert.....
>
> Is there anyone has Sircam's source code?
> ----- Original Message -----
> From: "Chris Freels" <cfreels@gracenote.com>
> To: <vuln-dev@securityfocus.com>; <SECURITY-BASICS@securityfocus.com>
> Sent: Friday, July 27, 2001 4:09 AM
> Subject: RE: Win32.Sircam.Worm Alert.....
>
>
> I have been seeing this virus come through my Exchange 2000 server for
> the last week. The first day I saw the alert I was receiving it. I am
> running McAfee Groupshield for Exchange 2000 SP1 and it is working just
> fine. I have not gotten one infected machine. We are running scan
> engine 4140 with the latest DAT.
>
> Chris
>
> -----Original Message-----
> From: Kyle Plate [mailto:kyle@CLASSIFIEDTECHNOLOGIES.COM]
> Sent: Wednesday, July 25, 2001 3:04 PM
> To: 'vuln-dev@securityfocus.com'; 'SECURITY-BASICS@securityfocus.com'
> Subject: RE: Win32.Sircam.Worm Alert.....
>
> FYI:
>
> Using Symantec's NAV for Exchange (Virus def: 7/18/01 12:00am) has been
> successful for us in detecting and moving to quarantine all Sircam
> infected
> messages that have been sent to our server.
>
> -----Original Message-----
> From: Jeremy Rodriguez [mailto:jrodriguez@intellinet-tech.com]
> Sent: Wednesday, July 25, 2001 9:19 AM
> To: Tom Geldner; 'Johnson, Greg'; vuln-dev@securityfocus.com;
> SECURITY-BASICS@securityfocus.com
> Subject: RE: Win32.Sircam.Worm Alert.....
>
> Yesterday the worm infected 3 of our systems. Just to test I downloaded
> it,
> save it a specific folder and scanned it with Norton's (using the latest
> defs) and to my suprise it did not pick it up.
> The fix Symantec has:
> http://www.sarc.com/avcenter/FixSirc.com
>
> Did find the worm and repair it.
>
>



Relevant Pages

  • Re: Virus officexp-KB910721-FullFile-ENU.exe
    ... being dropped by exchange and won't even reach the mailboxes, ... It is the Sophos AV client that is detecting those files and giving the ... I would move the Attachment Quarantine to a dedicated place so you can also ... the server to regularly scan all files in that folder. ...
    (microsoft.public.windows.server.sbs)
  • Re: Win32.Sircam.Worm Alert.....
    ... I have been seeing this virus come through my Exchange 2000 server for ... running McAfee Groupshield for Exchange 2000 SP1 and it is working just ... messages that have been sent to our server. ...
    (Vuln-Dev)
  • RE: Win32.Sircam.Worm Alert.....
    ... The first day I saw the alert I was receiving it. ... running McAfee Groupshield for Exchange 2000 SP1 and it is working just ... messages that have been sent to our server. ...
    (Security-Basics)
  • Re: Win32.Sircam.Worm Alert.....
    ... I have been seeing this virus come through my Exchange 2000 server for ... running McAfee Groupshield for Exchange 2000 SP1 and it is working just ... messages that have been sent to our server. ...
    (Security-Basics)
  • RE: Win32.Sircam.Worm Alert.....
    ... The first day I saw the alert I was receiving it. ... running McAfee Groupshield for Exchange 2000 SP1 and it is working just ... messages that have been sent to our server. ...
    (Vuln-Dev)