Actually... the subject is random. The body, however, is consistent. See these sources for more info: http://www.symantec.com/avcenter/venc/data/w32.sir cam.wormat_private http://vil.mcafee.com/dispVirus.asp?virus_k=99141& http://www.antivirus.com/vinfo/virusencyclo/defaul t5.asp?VName=TROJ_SIRCAM.A http://www.antivirus.com/vinfo/virusencyclo/defaul t5.asp?VName=TROJ_SIRCAM.A http://www.sophos.com/virusinfo/analyses/w32sircam a.html http://www.europe.f-secure.com/v-descs/sircam.shtm l http://service.pandasoftware.es/servlet/panda.pand aInternet.EntradaDatosInternet?operacion=FichaViru s&idVirusFicha=1911&pestanaFicha=1 http://support.centralcommand.com/cgi-bin/command. cfg/php/enduser/std_adp.php?p_refno=010718-000010 rudi carell wrote: > ..subject varies between > > "Wedding List" > > and > > "Reference Letter Peggy" > > yfyi. > > rc > > >Friday morning I recieved an email from a friend, it looked as >though he > >was sending me a .doc to look over. To my dismay, it was a worm that >had > >infected him. > > > >I have found little information about this worm, Mostly located at > >http://www.symantec.com/avcenter/venc/data/w32.sircam.wormat_private > > > >The Worm will come from someone that has you on there contact list, >and > >will > >have a differnt subject line determined by the attached file. > > > >The text will read in english as: > > > >Hi! How are you? > > > >I send you this file in order to have your advice > > > >See you later. Thanks > > > > rudicarellat_private > securityat_private > http://www.freefly.com/security/ > > _________________________________________________________________ > Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp -- kimmie mckinnis http://www.starjewel.org icq:186072/aol:starbreiz
This archive was generated by hypermail 2b30 : Tue Jul 24 2001 - 19:13:02 PDT