Posted by 7Up on 7/24/2001, 1:10 pm Formal Name: W32/SirCam@MM Description: This mass-mailing virus attempts to send itself and local documents to all users found in the Windows Address Book and email addresses found in temporary Internet cached files (web browser cache). It is important to note that the subject will vary and the filename it picks is random. The virus may be received in an email message containing the following information: Subject: [filename (random)] I send you this file in order to have your advice See you later. Thanks --- the same message may be received in Spanish --- Hola como estas ? Te mando este archivo para que me des tu punto de vista --- end example message --- The first extension will be the file type which was prepended by the virus. When run, the document will be saved to the C:\RECYCLED folder and then opened while the virus copies itself to C:\RECYCLED\SirC32.exe folder to conceal its presence and creates several registry keys in order to load itself whenever .EXE files are executed: just got that mail from our admins at work. i've already see posts about it in a couple forums, and i think eRacer has recieved the mail twice so far today, but has not opened it. just giving the massive heads up to ya'll
Virus Name: SirCam
Body: Hi! How are you?
or I hope you can help me with this file that I send
or I hope you like the file that I sendo you
or This is the file with the information that you ask for
or Espero me puedas ayudar con el archivo que te mando
or Espero te guste este archivo que te mando
or Este es el archivo con la información que me pediste
Nos vemos pronto, gracias.
Attached to the e-mail message will be a document with a double extension (the filename varies).
_________________________________________________
Message Thread:
« Back to thread