anyone know what header_check or body_check i should place in
the config to prevent the sircam worm from spreading. thanks.
> Definitely, have your workstations scanned by any of PCClin, Mcafee,
> Norton. You may install their Linux version of antivirus and integrate it
> with your MTAs. Evaluation copies can save you for a month..
>
> regards,
>
> Arth Paulite
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Chris G Haravata
> Sent: Wednesday, July 25, 2001 4:48 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [plug] FWD: Virus Advisory
> Importance: High
>
>
> YUP!!!! I think that there really is an outbreak. I have users here coming
> to me left and right saying that they cannot access their computers right
> after logging in. I found the SIRC32 file, deleted it from the Windoze
> registry, and voila! Login galore!!!
>
> Only problem is, I think the virus is using up my bandwidth to do send
> e-mails to everybody in the users address book... just like... what can i
> do? i have users complaining all over???
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of @rth
> > Sent: Wednesday, July 25, 2001 3:40 PM
> > To: [EMAIL PROTECTED]
> > Subject: RE: [plug] FWD: Virus Advisory
> >
> >
> > There's really an outbreak!
> > my qmail + qmail-scanner on linux intercepted 2000 infected
> > mails. According
> > to Trend is uses the same name as attachement, maybe you can
> > filter based on
> > attachement name if you don't have viruscan installed.
> >
> > regards,
> >
> > Arth Paulite
> >
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of Juan Miguel Cacho
> > Sent: Wednesday, July 25, 2001 12:35 PM
> > To: Plilippine Linux Users Group
> > Subject: [plug] FWD: Virus Advisory
> >
> >
> > Hello,
> >
> > I received this message from my ISP. I hope you don't mind if I forward it
> > to plug, just in case some of you are administering Windows machines.
> >
> > I myself have not received an e-mail containing this virus so I
> > still don't
> > know what to put in my header_checks &/or body_checks.
> >
> > ----- Forwarded message from Philippines Online Customer Service
> > <[EMAIL PROTECTED]> -----
> >
> > Dear Valued Subscriber,
> >
> > Please be advised against opening attachments from your email. A new
> > virus called "W32/SirCam@MM" is currently rapidly being propagated on the
> > net, the new virus works by sending an email similar to:
> >
> > --------------
> > Subject: [Filename random]
> > Body:
> >
> > Hi! How are you?
> > I send you this file in order to have your advice
> >
> > See you later. Thanks
> > --------------
> >
> > with an attachment, that's actually a link. The link points to a program
> > or payload that when run (when you click on it for example) will launch
> > the virus and allow it to do what it's designed to do, and that is to:
> >
> > 1) Load itself when any executable file is launched (thereby virtually
> > not being able to shut it down).
> > 2) Send copies (via email) of itself by using your PCs Windows Address
> > Book.
> > 3) Hijack the resources of your PC resulting in hanged applications and
> > may also delete files in your system.
> >
> > To know more about this virus and how to take it off from your system
> > please refer to either of the following anti-virus sites:
> >
> > 1) http://www.mcafee.com/anti-virus/viruses/sircam/default.asp?cid=2360
> > 2) http:[EMAIL PROTECTED]
> >
> > Sincerely yours,
> >
> >
> > Customer Care Department
> > Philippines Online
> >
> > ----- End forwarded message -----
> >
> > --
> > Juan Miguel Cacho [EMAIL PROTECTED]
> > Philippines
> > ...the poor count their blessings, the affluent count their calories.
> > _
> > Philippine Linux Users Group. Web site and archives at
> > http://plug.linux.org.ph
> > To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
> >
> > To subscribe to the Linux Newbies' List: send "subscribe" in the body to
> > [EMAIL PROTECTED]
> >
> > _
> > Philippine Linux Users Group. Web site and archives at
> http://plug.linux.org.ph
> To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
>
> To subscribe to the Linux Newbies' List: send "subscribe" in the body to
> [EMAIL PROTECTED]
>
> _
> Philippine Linux Users Group. Web site and archives at
> http://plug.linux.org.ph
> To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
>
> To subscribe to the Linux Newbies' List: send "subscribe" in the body to
> [EMAIL PROTECTED]
>
> _
> Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
> To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
>
> To subscribe to the Linux Newbies' List: send "subscribe" in the body to
>ph-linux-newbie-request@
lists.q-linux.com
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
