There's really an outbreak!
my qmail + qmail-scanner on linux intercepted 2000 infected mails. According
to Trend is uses the same name as attachement, maybe you can filter based on
attachement name if you don't have viruscan installed.

regards,

Arth Paulite


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Juan Miguel Cacho
Sent: Wednesday, July 25, 2001 12:35 PM
To: Plilippine Linux Users Group
Subject: [plug] FWD: Virus Advisory


Hello,

I received this message from my ISP. I hope you don't mind if I forward it
to plug, just in case some of you are administering Windows machines.

I myself have not received an e-mail containing this virus so I still don't
know what to put in my header_checks &/or body_checks.

----- Forwarded message from Philippines Online Customer Service
<[EMAIL PROTECTED]> -----

Dear Valued Subscriber,

Please be advised against opening attachments from your email.    A new
virus called "W32/SirCam@MM"  is currently rapidly being propagated on the
net, the new virus works by sending an email similar to:

--------------
        Subject:  [Filename random]
        Body:

                Hi! How are you?
                I send you this file in order to have your advice

                See you later. Thanks
--------------

with an attachment, that's actually a link.   The link points to a program
or payload that when run (when you click on it for example)  will launch
the virus and allow it to do what it's designed to do, and that is to:

1)    Load itself when any executable file is launched (thereby virtually
not being able to shut it down).
2)    Send copies (via email) of itself by using your PCs Windows Address
Book.
3)    Hijack the resources of your PC resulting in hanged applications and
may also delete files in your system.

To know more about this virus and how to take it off from your system
please refer to either of the following anti-virus sites:

1)  http://www.mcafee.com/anti-virus/viruses/sircam/default.asp?cid=2360
2)  http:[EMAIL PROTECTED]

Sincerely yours,


Customer Care Department
Philippines Online

----- End forwarded message -----

--
Juan Miguel Cacho       [EMAIL PROTECTED]
Philippines
...the poor count their blessings, the affluent count their calories.
_
Philippine Linux Users Group. Web site and archives at
http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]

_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

To subscribe to the Linux Newbies' List: send "subscribe" in the body to 
[EMAIL PROTECTED]

Reply via email to