NEW VIRUS -- Don't Open any PIF, EXE, VBS or COM files ever!

07-20-2001, 04:48 PM

New Virus name is: "W32/SirCam@MM"

You'll get an email saying:

Subject: The subject of the email will be random, and will be the same as the file name of the attachment in the email.

Message: The message body will be semi-random, but will always contain one of the following two lines (either English or Spanish) as the first and last sentences of the message.

Spanish Version:
First line: Hola como estas ?
Last line: Nos vemos pronto, gracias.

English Version:
First line: Hi! How are you?
Last line: See you later. Thanks

Between these two sentences, some of the following text may appear:

Spanish Version:
Te mando este archivo para que me des tu punto de vista
Espero me puedas ayudar con el archivo que te mando
Espero te guste este archivo que te mando
Este es el archivo con la informaci=n que me pediste

English Version:
I send you this file in order to have your advice
I hope you can help me with this file that I send
I hope you like the file that I sendo you
This is the file with the information that you ask for

With Attachments -- DO NOT EVER RUN ATTACHMENTS before you scan them. Even if it LOOKS like it came from your MOM even.

Mem got infected.. I just got 2 emails from him.. I let him know, and all the virus sites say that this is spreading BIGTIME. Be safe guys!

BUT.....

If you RAN this attachment, go here and get rid of it before October 16th.
http://www.symantec.com/avcenter/ven...m.worm@mm.html

------------------
Ziroc
Ironworks Webmaster
www.tgeweb.com/ironworks

Lioness · 07-20-2001, 04:50 PM

Thanx, Ziroc, I saw the message at the top of the page, but am glad you put a warning here, it's much more noticeable.

Good Luck with yours Memmy!

------------------

Official teaser and ranger of the HADB Clan
"I am great...start bowin'"
heeheeheeheehee

Melusine · 07-20-2001, 04:51 PM

Ziroc!! thanks!
I got one and I smelled something fishy too

So I replied to let Memny know as well....
stupid viruses

------------------
Melusine, High Queen of Fluffies, Archbabe of the OHF, the LH,
the HADB and the SPAE(Society for the
Prevention of Acronym Extinction) &
Official Entertainer Elf of the BG2 Bar

Your voice is ambrosia
Amy Brown Fantasy Art

Fljotsdale · 07-20-2001, 04:52 PM

Thank you, Ziroc! Info much appreciated.

------------------

Larry_OHF · 07-20-2001, 04:52 PM

Thanks...our MIS Help Desk people warned us this morning about that very same virus, so I guess I can help you to confirm to everyone else to be on guard.

------------------

Devoted member of the Ironworks
Loyal guardian of the OHF
Member of the Ancients' club
Witness of the 4,000th post by Cloudposter
Currently engaged in the Throne of Bhaal expansion set

Xanthul · 07-20-2001, 04:56 PM

2 days ago i got 4 of these in spanish, i think it was weird so i didnt open it. Today i got one in english from memnoch, the file name was SexDiary.doc.bat so i thought it was something funny that he wanted to send me, and as i had seen the virus only in spanish i didnt realize that the words were the same as in the old messages so ive opened it

. Im gonna install my antivirus now to see what can i do.

NOTE: when hotmail checked the file for viruses he didnt find any, Bill Gates TM

------------------

"I´ve been captured... and I don´t care" -Ertai, Captive of the Blinding Angel

07-20-2001, 05:50 PM

Quote:

Originally posted by Ertai_OHF:
2 days ago i got 4 of these in spanish, i think it was weird so i didnt open it. Today i got one in english from memnoch, the file name was SexDiary.doc.bat so i thought it was something funny that he wanted to send me, and as i had seen the virus only in spanish i didnt realize that the words were the same as in the old messages so ive opened it . Im gonna install my antivirus now to see what can i do.

NOTE: when hotmail checked the file for viruses he didnt find any, Bill Gates TM

Yep, I just got an email from 'you' (The virus, not you personally) in my INBOX.

. Clean it quick, and email everyone in your address book NOT to open they other one.

------------------
Ziroc
Ironworks Webmaster
www.tgeweb.com/ironworks

Xanthul · 07-20-2001, 06:09 PM

Ive deleted the file and scanned all of my hard drives and memory and mails and everything in my mail, i think its ok now. viruses suck

could i sue hotmail for not detecting it ?? it would be fun

------------------

"I wish my Angel was here... I fear nothing with her" -Ertai, Captive of the Blinding Angel

Xanthul · 07-20-2001, 06:29 PM

Info, detecting and fixing in this link

http://www.symantec.com/avcenter/ven...ered.worm.html

------------------

"I wish my Angel was here... I fear nothing with her" -Ertai, Captive of the Blinding Angel

Cloudbringer · 07-20-2001, 06:29 PM

Dan! I was just about to post this and warn people... it can also be called W95/Sircam...etc and I had the distinct displeasure of opening my hotmail from him and infecting my office pc! (Sorry Memsy, not your fault!

)

My tech support removed the payload but the damage was done, somehow my windows won't boot up and they may have to wipe my hd. Sigh....oh and fyi the file was pure porn and I knew at once that Memsy hadn't sent it to me, but it was too late. File name was file4.doc. (souns harmless, doesn't it?

) These are random so yours may be different.

Everyone, please note that it came to my HOTMAIL acct and you should NOT open any attachments in mail from Mario (or me, now!)in your hotmail accounts. (or any html attachments period!)

What a way to start my vacation...sigh

Cloudy, holding a sick kitty who just sneezzed on her leg

------------------

Raindancer of the Laughing Hyenas Clan
Storm-Queen
StormCloud of the Black Knight: Heart Mind Soul Forever
"To sleep, perchance to dream..."

[This message has been edited by Cloudbringer (edited 07-20-2001).]

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Major Virus Alert -- DO NOT open any email from 'FBI'	Ziroc	General Discussion	20	02-23-2005 08:04 PM
Could hotmail think files changed by dalekeeper are a virus?	bigdndfan	Icewind Dale \| Heart of Winter \| Icewind Dale II Forum	2	01-12-2005 12:05 PM
Free for all battle (open,open,open!!!)	chi master	Ironworks Online Roleplaying	58	11-12-2002 03:41 PM
VIRUS-ALERT get anti virus patch here	TheCrimsomBlade	General Conversation Archives (11/2000 - 01/2005)	2	09-20-2001 12:17 AM
Help converting wac.files into wav.files?	t1d	Baldurs Gate II Archives	6	05-23-2001 03:04 PM

07-20-2001, 04:48 PM	#1
Ziroc Guest Posts: n/a	New Virus name is: "W32/SirCam@MM" You'll get an email saying: Subject: The subject of the email will be random, and will be the same as the file name of the attachment in the email. Message: The message body will be semi-random, but will always contain one of the following two lines (either English or Spanish) as the first and last sentences of the message. Spanish Version: First line: Hola como estas ? Last line: Nos vemos pronto, gracias. English Version: First line: Hi! How are you? Last line: See you later. Thanks Between these two sentences, some of the following text may appear: Spanish Version: Te mando este archivo para que me des tu punto de vista Espero me puedas ayudar con el archivo que te mando Espero te guste este archivo que te mando Este es el archivo con la informaci=n que me pediste English Version: I send you this file in order to have your advice I hope you can help me with this file that I send I hope you like the file that I sendo you This is the file with the information that you ask for With Attachments -- DO NOT EVER RUN ATTACHMENTS before you scan them. Even if it LOOKS like it came from your MOM even. Mem got infected.. I just got 2 emails from him.. I let him know, and all the virus sites say that this is spreading BIGTIME. Be safe guys! BUT..... If you RAN this attachment, go here and get rid of it before October 16th. http://www.symantec.com/avcenter/ven...m.worm@mm.html ------------------ Ziroc Ironworks Webmaster www.tgeweb.com/ironworks

07-20-2001, 04:50 PM	#2
Lioness Jack Burton Join Date: June 3, 2001 Location: Among the Stars Age: 36 Posts: 5,837	Thanx, Ziroc, I saw the message at the top of the page, but am glad you put a warning here, it's much more noticeable. Good Luck with yours Memmy! ------------------ Official teaser and ranger of the HADB Clan "I am great...start bowin'" heeheeheeheehee

07-20-2001, 04:51 PM	#3
Melusine Dracolisk Join Date: January 8, 2001 Location: Amsterdam, The Netherlands Age: 43 Posts: 6,541	Ziroc!! thanks! I got one and I smelled something fishy too So I replied to let Memny know as well.... stupid viruses ------------------ Melusine, High Queen of Fluffies, Archbabe of the OHF, the LH, the HADB and the SPAE(Society for the Prevention of Acronym Extinction) & Official Entertainer Elf of the BG2 Bar Your voice is ambrosia Amy Brown Fantasy Art

07-20-2001, 04:52 PM	#4
Fljotsdale Thoth - Egyptian God of Wisdom Join Date: March 12, 2001 Location: Birmingham, West Mid\'s, England Age: 87 Posts: 2,859	Thank you, Ziroc! Info much appreciated. ------------------

07-20-2001, 04:52 PM	#5
Larry_OHF Ironworks Moderator Join Date: March 1, 2001 Location: Midlands, South Carolina Age: 48 Posts: 14,759	Thanks...our MIS Help Desk people warned us this morning about that very same virus, so I guess I can help you to confirm to everyone else to be on guard. ------------------ Devoted member of the Ironworks Loyal guardian of the OHF Member of the *Ancients'* club Witness of the 4,000th post by Cloudposter Currently engaged in the *Throne of Bhaal* expansion set

07-20-2001, 04:56 PM	#6
Xanthul Symbol of Cyric Join Date: March 1, 2001 Location: Outside my place Age: 42 Posts: 1,283	2 days ago i got 4 of these in spanish, i think it was weird so i didnt open it. Today i got one in english from memnoch, the file name was SexDiary.doc.bat so i thought it was something funny that he wanted to send me, and as i had seen the virus only in spanish i didnt realize that the words were the same as in the old messages so ive opened it . Im gonna install my antivirus now to see what can i do. NOTE: when hotmail checked the file for viruses he didnt find any, Bill Gates TM ------------------ "I´ve been captured... and I don´t care" -Ertai, Captive of the Blinding Angel

07-20-2001, 06:09 PM	#8
Xanthul Symbol of Cyric Join Date: March 1, 2001 Location: Outside my place Age: 42 Posts: 1,283	Ive deleted the file and scanned all of my hard drives and memory and mails and everything in my mail, i think its ok now. viruses suck could i sue hotmail for not detecting it ?? it would be fun ------------------ "I wish my Angel was here... I fear nothing with her" -Ertai, Captive of the Blinding Angel

07-20-2001, 06:29 PM	#9
Xanthul Symbol of Cyric Join Date: March 1, 2001 Location: Outside my place Age: 42 Posts: 1,283	Info, detecting and fixing in this link http://www.symantec.com/avcenter/ven...ered.worm.html ------------------ "I wish my Angel was here... I fear nothing with her" -Ertai, Captive of the Blinding Angel

07-20-2001, 06:29 PM	#10
Cloudbringer Ironworks Moderator Join Date: March 1, 2001 Location: Upstate NY USA Posts: 19,737	Dan! I was just about to post this and warn people... it can also be called W95/Sircam...etc and I had the distinct displeasure of opening my hotmail from him and infecting my office pc! (Sorry Memsy, not your fault! ) My tech support removed the payload but the damage was done, somehow my windows won't boot up and they may have to wipe my hd. Sigh....oh and fyi the file was pure porn and I knew at once that Memsy hadn't sent it to me, but it was too late. File name was file4.doc. (souns harmless, doesn't it? ) These are random so yours may be different. Everyone, please note that it came to my HOTMAIL acct and you should NOT open any attachments in mail from Mario (or me, now!)in your hotmail accounts. (or any html attachments period!) What a way to start my vacation...sigh Cloudy, holding a sick kitty who just sneezzed on her leg ------------------ Raindancer of the Laughing Hyenas Clan Storm-Queen StormCloud of the Black Knight: Heart Mind Soul Forever "To sleep, perchance to dream..." [This message has been edited by Cloudbringer (edited 07-20-2001).]

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)