vikingpower Posted July 26, 2001 Share Posted July 26, 2001 I have received several emails recently with a file attached. I was suspicious of the email and delated without opening. I now know this was a worm from the email info click on this site for more info on the virus and email text. Message: The message body will be semi-random, but will always contain one of the following two lines (either English or Spanish) as the first and last sentences of the message. Spanish Version: First line: Hola como estas ? Last line: Nos vemos pronto, gracias. English Version: First line: Hi! How are you? Last line: See you later. Thanks Between these two sentences, some of the following text may appear: Spanish Version: Te mando este archivo para que me des tu punto de vista Espero me puedas ayudar con el archivo que te mando Espero te guste este archivo que te mando Este es el archivo con la informaci=n que me pediste English Version: I send you this file in order to have your advice I hope you can help me with this file that I send I hope you like the file that I sendo you This is the file with the information that you ask for www.sarc.com/avcenter/ven...rm@mm.html Do not open the file attached to the email. Tom (Edited by vikingpower at 10:46 pm on July 26, 2001) Quote Link to comment Share on other sites More sharing options...
Guest CanadaCrush Posted July 26, 2001 Share Posted July 26, 2001 Yeah, I believe it started on the MMA/NHB boards a little while ago. I've been getting the virus for some time. It's usually disguised as a txt file, or a doc file. I've recieved it in English and Portugese. It just goes through your address book and sends itself to other people. -Mark Quote Link to comment Share on other sites More sharing options...
Guest simon lodge Posted July 26, 2001 Share Posted July 26, 2001 Tom Thanks for the advice you do get some stupid people about who get kicks out of doing a virus. simon Quote Link to comment Share on other sites More sharing options...
Solan Posted July 27, 2001 Share Posted July 27, 2001 Thank you, Viking. Since your link didn't work when I tried it, I checked it at http://www.europe.f-secure.com/virus-info/hoax/ - an excellent site for checking rumors that arrive via email. This was the real McCoy. There is more on the virus at http://www.europe.f-secure.com/v-descs/sircam.shtml Quote Link to comment Share on other sites More sharing options...
Bill Piche Posted July 27, 2001 Share Posted July 27, 2001 This SirCAm is nasty and spreading like wildfire. I have been getting about 10 emails a day from infected people! Quote Link to comment Share on other sites More sharing options...
BarBender Posted July 27, 2001 Share Posted July 27, 2001 Manual removal of the SirCam virus is somewhat trivial. However, the instructions that I have seen left out the critical step of renaming regedit.exe to regedit.com and then following the removal instructions. The instructions are laughably useless without this step since SirCam, like PrettyPark, disables exe files. Hint: use command.com (as opposed to cmd.exe) to rename regedit. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.