Re: Re:Sircam

From: Oliver Rochford (webmaster@meridian-consulting.de)
Date: 07/30/01 

Message-ID: <005801c11923$1be49700$1f00a8c0@Webdesign>
From: "Oliver Rochford" <webmaster@meridian-consulting.de>
To: <vuln-dev@securityfocus.com>, <SECURITY-BASICS@securityfocus.com>
Subject: Re: Re:Sircam
Date: Mon, 30 Jul 2001 20:11:50 +0200

I was called out of my holiday today because we got the virus, and it`s bad.
13 out of 15 Windows 98 machines were infected. And yes, it searches for
e-mail addresses in your webcache too, one went from us to compaq, but they
had a good filter thankfully.
Take heed, though, if you haven`t got a virus filter (we`re just setting up
our own mailserver, our third party provider obviously didn`t have one), and
your users habitually open anything, you will have a serious problem
Oliver Rochford

Meridian Computer
Grossestr.58
49565 Bramsche
Tel:05461969696
Fax:05461945372
www.meridian-computer.de

----- Original Message -----
From: <teo@gecadsoftware.com>
To: <vuln-dev@securityfocus.com>; <SECURITY-BASICS@securityfocus.com>
Sent: Thursday, July 26, 2001 9:14 PM
Subject: Re: Re:Sircam

> Hi Kimberly!
> On Wed, 25 Jul 2001, Kimberly Anne McKinnis wrote:
>
> > From what I've read, it looks for any email addresses on the system, not
> > just in address books. So if webmaster@ was posted on a webpage
somewhere,
> > that may be the cause.
> >
> > This subject line is causing some peoples mail servers to reject the
mail.
> > Somehow I doubt the real virus is actually going to send with that
subject.
> >
> here are some technical details:
> http://www.ravantivirus.com/virus/showvirus.php?v=73
>
> regards,
>
> -- teodor
>

Relevant Pages

  • New Booting Problem
    ... I have just encountered a problem that is affecting two Windows XP machines. ... I am guessing it is a new virus of some kind, ... it freezes right after ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: W32.RontokBro.B@mm
    ... then i go to registery and remove some keys and values from registery. ... then i isntall norton anti virus 2005 and update it with last virus ... and make me to restart windows and wait for virus ... Do not bring the network up again until you are sure all machines are ...
    (microsoft.public.security.virus)
  • Re: Lsass.exe error no Sasser
    ... This occures in many pc's and hall have the windows ... The Lsass.exe error doesn't always come from a virus. ... On standalone machines when I've gotten ... MS MVP - Windows Shell/User ...
    (microsoft.public.windowsxp.general)
  • Re: [Full-Disclosure] Tracking a virus by logging infected machines
    ... > helpful to gather infection statistics if a virus were to keep a log of ... > the IP addresses of all the machines it infected. ... Windows is the question and the answer is no. ...
    (Full-Disclosure)
  • Startup files replaced
    ... we have had four machines on different domains come up with ... Please insert the Windows 2000 CD ... We have run virus scans on the machine and have run two different ... spyware removes, ...
    (microsoft.public.win2000.windows_update)