Virus Inundated

it's been in two or three threads here and a news post on the front page. and, yes, I think at this point we're all getting it...

nasty one called sircam32

The cure link is posted on one of the other threads....my one, I think....shall check for you...

I've received the email in discussion a few times now, but each time, the attachment has only been a 59byte ATT0004.DAT file. There's no way a file this size could carry this virus, so I opened it up in HexEdit, as I always do with viruses to find that it was empty. I checked my machine for symptoms of the virus, and it came out clean. Just interested if anyone else is receiving this version of it, or if anyone has actually seen the mystic .exe that's supposed to be attached?

Cheers,

AJ

The file attachment is a randomly chosen file from the host computer so each mailer will have a different subject line and a different attachment. So far all of them I've gotten (the sircam virus) have been over 200k. I also got one called the W95MTX matrix worm/virus combo a few days ago. That one came in about 7 times (it shows up as two consecutive emails) and I've gotten the sircam about thirty times so far.

sircam up to 58 now and counting. 54 of them from the same address. I can tell when they go online (or go offline) because the virus stops being sent. It's just started again. They must have just gone online cos I checked at 6:30 (UK) and had not received any for several hours. 48 was the amount at 12:00 last night (UK) which had not changed by 6:30 (UK).

And by the way thanks jafo for posting the link to m@ilsafe. Right after I installed it I saw it had intercepted an email to my sister (everything goes through my VPop server) containing it. She would definitely have opened that email attachment with no thought of viruses.

I'm still the proud owner of 3 versions....in quarantine...if anyone does need it to evaluate.....2 .com's and a .pif ....all originally Dangeruss - related topic headings....but I have been clean for ages, now....this was only on the very first day....

viri make me violent.

Just got a new one...JabScreenSaver2.zip.pif....
Like-wise in quarantine....

Came from Somatic8....damn 700k file, too....

The virus attaches a random file from your system... Imagine it randomly chooses a 100 Meg file or above (yes, I have some of those, mainly PSDs though).

The cure is actually don't execute unknown attachments. Why is everyone always looking for something to save them from themselves?

I've gotten a couple of these. Ran them through IPE, more out of curiosity than anything else. And then I deleted them. No big deal. I wouldn't have executed them even if IPE found them to be completely clean.

JayG: What the heck is a viri?

One ATT01546.ATT (78b) got into our environment. Also attached was a text file Alert.TXT. It had the Hi.... message body and subject line was foedselsdag I think that's Danish.

It somehow went into the wrong inbox and the user deleted it.

It's the first to slip through our firewall and quarantine folders.

Virus is singular...virii is plural...

Nice one Jafo

am i the only person who hasnt been sent this virus?!!

I've only had one, strangely from someone who has never sent me any email.

Oh, and Jafo... "virii" is not a word. The plural of "virus" is "viruses"... http://www.dictionary.com/cgi-bin/dict.pl?term=virus

xi xi xi...

Jafo: What Maxim said.

Heh heh. Jafo misspelled a word.

And you all thought I was 'trying' to be correct?....

BTW....3 Viruses would be 'viriii'.....