Definitely, have your workstations scanned by any of PCClin, Mcafee,
Norton. You may install their Linux version of antivirus and integrate it
with your MTAs. Evaluation copies can save you for a month..
regards,
Arth Paulite
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Chris G Haravata
Sent: Wednesday, July 25, 2001 4:48 PM
To: [EMAIL PROTECTED]
Subject: RE: [plug] FWD: Virus Advisory
Importance: High
YUP!!!! I think that there really is an outbreak. I have users here coming
to me left and right saying that they cannot access their computers right
after logging in. I found the SIRC32 file, deleted it from the Windoze
registry, and voila! Login galore!!!
Only problem is, I think the virus is using up my bandwidth to do send
e-mails to everybody in the users address book... just like... what can i
do? i have users complaining all over???
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of @rth
> Sent: Wednesday, July 25, 2001 3:40 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [plug] FWD: Virus Advisory
>
>
> There's really an outbreak!
> my qmail + qmail-scanner on linux intercepted 2000 infected
> mails. According
> to Trend is uses the same name as attachement, maybe you can
> filter based on
> attachement name if you don't have viruscan installed.
>
> regards,
>
> Arth Paulite
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Juan Miguel Cacho
> Sent: Wednesday, July 25, 2001 12:35 PM
> To: Plilippine Linux Users Group
> Subject: [plug] FWD: Virus Advisory
>
>
> Hello,
>
> I received this message from my ISP. I hope you don't mind if I forward it
> to plug, just in case some of you are administering Windows machines.
>
> I myself have not received an e-mail containing this virus so I
> still don't
> know what to put in my header_checks &/or body_checks.
>
> ----- Forwarded message from Philippines Online Customer Service
> <[EMAIL PROTECTED]> -----
>
> Dear Valued Subscriber,
>
> Please be advised against opening attachments from your email. A new
> virus called "W32/SirCam@MM" is currently rapidly being propagated on the
> net, the new virus works by sending an email similar to:
>
> --------------
> Subject: [Filename random]
> Body:
>
> Hi! How are you?
> I send you this file in order to have your advice
>
> See you later. Thanks
> --------------
>
> with an attachment, that's actually a link. The link points to a program
> or payload that when run (when you click on it for example) will launch
> the virus and allow it to do what it's designed to do, and that is to:
>
> 1) Load itself when any executable file is launched (thereby virtually
> not being able to shut it down).
> 2) Send copies (via email) of itself by using your PCs Windows Address
> Book.
> 3) Hijack the resources of your PC resulting in hanged applications and
> may also delete files in your system.
>
> To know more about this virus and how to take it off from your system
> please refer to either of the following anti-virus sites:
>
> 1) http://www.mcafee.com/anti-virus/viruses/sircam/default.asp?cid=2360
> 2) http:[EMAIL PROTECTED]
>
> Sincerely yours,
>
>
> Customer Care Department
> Philippines Online
>
> ----- End forwarded message -----
>
> --
> Juan Miguel Cacho [EMAIL PROTECTED]
> Philippines
> ...the poor count their blessings, the affluent count their calories.
> _
> Philippine Linux Users Group. Web site and archives at
> http://plug.linux.org.ph
> To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
>
> To subscribe to the Linux Newbies' List: send "subscribe" in the body to
> [EMAIL PROTECTED]
>
> _
> Philippine Linux Users Group. Web site and archives at
http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
_
Philippine Linux Users Group. Web site and archives at
http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]