
	Where results make sense

Topic: Sircam

Related Topics

Sobig worm

Acme virus

Blaster worm

SQL slammer worm

CIH virus

Timeline of notable computer viruses and worms

Morris worm

(c)Brain

Melissa worm

Code Red worm

Elk Cloner

List of computer viruses

Visual Basic

In the News (Fri 18 Dec 09)

Northern Trust

Marvin Harrison

Peter Chernin

Gary Locke

Match Play

Penelope Cruz

Mickey Rourke

AR Rahman

Danny Boyle

Hugh Jackman

	Rice IT - The Sircam Worm (Site not responding. Last check: 2007-10-14)
		SirCam is a complicated and powerful piece of malware, but it has some characteristics which make it readily identifiable.
		SirCam will use a file in the My Documents folder as the base attachment to which the virus is added -- even files which have never been sent as attachments before.
		SirCam also has a number of dangerous payloads, including the ability to fill up your hard disk (which may render your computer unusable) and delete files.
	www.rice.edu /it/security/virus/sircam.html (1134 words)

	CNN.com - World leader latest victim of 'Sircam' virus - August 3, 2001
		The "Sircam" virus, a rogue application that has spread to most countries, was responsible for the public release of the guarded schedule of President Leonid Kuchma, according to a news Web site in the Ukraine.
		"Sircam is now the all-time number one virus detected by MessageLabs (and the) figures show no sign of abating," said the UK-based company, which specializes in content filters for e-mail on the Internet.
		Symantec, which released a second Sircam patch on July 24, upgraded the bug this week to the second highest danger category, a four out of a possible five.
	www.cnn.com /2001/TECH/internet/08/02/ukraine.sircam/index.html (618 words)

	Sircam Virus Widely Spreads
		Sircam does not send infected e-mails by using the mail client capabilities that the user is using, but uses its own Simple Mail Transfer Protocol (SMTP) client capabilities.
		"Sircam obtains the SMTP information from the user's Outlook Express or Outlook, and sends infected e-mails using the setting," said an official of Symantec Corp. According to Trend Micro, the virus also sends e-mails by using a SMTP server on the Internet that the users have set up beforehand for their own use.
		Sircam takes in the files with extensions, such as "doc," "xls," "zip" and "exe," in the Desktop and My Documents folders, and sends them as attachment files via e-mail.
	www.wirelessdevnet.com /news/2001/207/news8.html (596 words)

	Wired News: SirCam Ready to Drop Payload
		Due to a glitch in SirCam's code, the worm does not replicate on Windows NT or 2000 computers, but its other capabilities seem to remain active.
		SirCam has two "payloads" -- destructive actions that it performs on infected computers -- both controlled by random numbers generated by the worm.
		SirCam picks up a random file from an infected computer, inserts the virus into that file, and then e-mails it as an attachment to random e-mail addresses culled from a users e-mail address book and internet cache files.
	www.wired.com /news/technology/0,1282,47476,00.html (1167 words)

	PCWorld.com - Antivirus Vendors Warn Against Sircam
		Sircam is yet another computer virus that arrives with an e-mail attachment, asking gullible victims--in either Spanish or English--to open an attached document, at which point its damaging payload strikes.
		Although Sircam doesn't consistently damage every computer it lands on, it may randomly create a new file in a victim's hard drive in order to fill it up and make it crash, or simply delete all the files on the machine.
		Sircam differs from e-mail viruses like the recent Anna Kournikova virus in that Sircam is a Windows program that can search a hard drive for document files, Excel spreadsheet files, Zip files, or executable files, and then append them to the end of the attachment it sends.
	www.pcworld.com /news/article/0,aid,55783,tk,dn072001X,00.asp (408 words)

	SirCam: The Worm That Won't Die [Free Republic] (Site not responding. Last check: 2007-10-14)
		According to Sophos, an antiviral software company, SirCam accounted for a whopping 65 percent of all reported virus infections in July, a record unmatched by any other virus since Sophos started tracking them in 1998.
		So, either SirCam is one incredibly pervasive and persuasive virus, or its much-heralded predecessors didn't have a huge effect on most e-mail users.
		SirCam's infection rate is far greater than that of its predecessors and, although infections seem to have slowed somewhat this week, the virus is still on the move.
	www.freerepublic.com /forum/a3b7c876d5500.htm (2184 words)

	SirCam to delete all files in c: on October 16th on Xatrix Security (Site not responding. Last check: 2007-10-14)
		Anti-virus software companies say that SirCam, best known for its unauthorized e-mailing of randomly selected documents from the hard drives of infected PCs, also packs instructions that can cause it to delete all files and folders on the "C:" drive of some infected PCs come Oct. 16.
		While it is likely that thousands of PCs will be infected by SirCam on Oct. 16, not all of them will see the contents of a hard drive disappear.
		After SirCam, the most common worm spotted in EasyLink customers' e-mail was Magistr in its many variations - one of which has been around since March of this year.
	www.xatrix.org /print789.html (396 words)

	Kenyon College - LBIS - w32.Sircam.Worm@mm (Site not responding. Last check: 2007-10-14)
		Be on the alert for any email messages with attachments that you have not solicited from the sender as this virus cannot readily be identified by the sender name, subject line, or attachment name.
		Aside from mass mailing itself to everyone in the email address book of an infected machine, Sircam is also capable of deleting files, degrading the performance of the computer, and exporting potentially confidential information from the hard drive.
		Sircam is not the only computer virus on the loose that disguises itself by using "stolen" sender, subject, and attachment names.
	lbis.kenyon.edu /help/virus/sircam.phtml (1277 words)

	Symantec fails to stop SirCam \| The Register
		The SirCam worm has revealed weaknesses in anti-virus protection relied on by many firms as a first line of defence against viral infection.
		As previously reported, SirCam spreads itself as an attachment to email messages (or possibly network shares), and may in certain cases delete files from a victim's hard disk.
		SirCam snaffles up files from a user's hard disk and wraps them in viral code before propagating itself to email addresses filched from a victim's address book or temporary Internet cache files.
	www.theregister.co.uk /2001/07/27/symantec_fails_to_stop_sircam (648 words)

	security.itworld.com - Sircam virus eludes Symantec anti-virus scanning update
		The Sircam computer virus eluded Symantec Corp.'s corporate and consumer Norton Anti-Virus products, because the first software update Symantec created to combat Sircam failed to detect the virus through e-mail scanning at the gateway and desktop.
		Though he wasn't hit directly by Sircam because he generally doesn't open e-mail attachments, especially when he hears a new e-mail-borne virus is on the loose, he did become aware of the failure of the first Sircam patch through others' experiences.
		Sircam slipped through Norton Anti-Virus Corporate Edition on the desktop, too, though it was stopped by Auto-protect before the attachment was opened, Miller said.
	security.itworld.com /4340/NWW010727sircam/pfindex.html (615 words)

	company information
		"'SirCam' uses the same technological means for spreading and penetrating a computer as the infamous worms 'Loveletter' and 'Melissa' and their like.
		'SirCam's' spreading ability confirms the fact that many users haven't learned their lesson from the previous global epidemics, and even to this point have not grasped the importance of timely adding anti-virus updates and using caution when dealing with e-mail attachments from even known sources," said Denis Zenkin, Head of Corporate Communications for Kaspersky Labs.
		"SirCam" spreads as a file attachment to an e-mail, and at the same time, this file does not have a consistent name, extension and a message text.
	www.kaspersky.com /news.asp?tnews=0&nview=7&id=208&page=0 (356 words)

	CNN.com - Two computer viruses making rounds - July 20, 2001
		Sircam is a mass mailing virus that uses Microsoft Outlook Express to distribute itself, according to Trend Micro.
		But Sircam is particularly nasty since it can send out personal documents saved on the hard drive.
		When Sircam is run, it copies itself to the Recycling Bin, sets up a directory called 'c:\recycled\SirC32.exe' and appears as 'SCam32.exe' in the Windows system directory.
	www.cnn.com /2001/TECH/internet/07/20/computer.viruses/index.html (793 words)

	Guardian Unlimited \| Netnews \| Now it's getting personal - the prying email virus
		To add insult to injury, SirCam, which is believed to have originated in Latin America, also goes through the computer's web cache - the store of internet sites the user has visited - and emails itself and the document to any addresses it finds on there.
		SirCam's novel design and behaviour are disturbing evidence of the increasing technical sophistication of virus writers.
		SirCam, however, has been able to thrive because it does not always put the same message in the email subject line.
	www.guardian.co.uk /internetnews/story/0,7369,526571,00.html (565 words)

	SirCam Virus Special Report from SoftProse Technology, Inc.
		SirCam as a computer virus has an unprecedented number of features.
		Technically, SirCam is a "Worm", not a virus.
		This is the most complex and significant virus that we have ever seen in its capability to transmit and cause harm.
	www.softprose.com /information/antivirus/sircam.shtml (1198 words)

	How to protect your PC from the SirCam worm - ZDNet UK Insight
		SirCam is a sophisticated worm that will infect files shared over an open network so most people will never see the original infected e-mail associated with the worm.
		SirCam (w32.Sircam@mm) also contains a dangerous payload: It may delete all the files on the C drive in mid October.
		SirCam also spreads among open file shares on a networked system (in other words, if you can access other directories on other machines, that's an open file share).
	insight.zdnet.co.uk /internet/security/0,39020457,2091860,00.htm (817 words)

	SirCam worm fails to reactivate \| CNET News.com
		Code in the worm, which continues to spread among unprotected computers connected to the Internet, would have turned programs attempting to execute on Oct. 16 into a crap shoot: Running an application on an infected PC would have deleted all files on the computer 5 percent of the time.
		The writer of SirCam made an error in the code that stacked the odds against the worm, said Graham Cluley, senior technology consultant for Oxford, England-based Sophos.
		SirCam started spreading in mid-July and has continued to send out large amounts of worm-laden e-mail to the Internet from infected PCs running Microsoft Windows.
	news.com.com /2100-1001-274506.html (920 words)

	The Sircam Virus/Worm
		Deletes the files infected with the Sircam worm and removes the changes that were made to a computer by the virus.
		The SirCam worm continued to gain momentum, carrying with it the potential to slow servers and send company secrets.
		SirCam sends a random file from the infected computer, potentially sending confidential business data or embarrassing personal information along with the virus...
	duxcw.com /news/virus/sircam.htm (567 words)

	Wired News: Love Bug, SirCam Neck and Neck
		SirCam, a unique virus/worm, is still rated by most virus-threat tracking lists as the No. 1 menace to computer systems in North America, Europe and Asia.
		SirCam is the only virus to be rated as a moderate threat on McAfee's list of three dozen of the newest and most active viruses, and is rated as a 4 by Symantec, with 5 being the most dangerous designation.
		SirCam arrives with a virus-infected attachment and a random document culled from an infected machine.
	www.wired.com /news/technology/0,1282,45476,00.html (1125 words)

	FAQ: What you need to know about SirCam \| CNET News.com
		SirCam is a malicious program with characteristics of a worm--a self-propagating piece of destructive code--and a virus, a malicious program that attaches itself to other files.
		That's because each time the SirCam worm infects a computer, it randomly plucks a document from that computer and sends itself out with the document attached--drawing the e-mail subject line, and the name of the attachment itself, from the title of the pilfered document.
		SirCam also can perform several destructive acts based on a combination of arcane PC settings and chance.
	news.cnet.com /news/0-1003-200-6660198.html (914 words)

	FileForum \| SirCam Remover
		SirCam is a new email worm virus that was just discovered in the on July 17, 2001.
		If you haven't downloaded the attachment, then it is still on the Hotmail server(s), so of course the trojan killer was unable to locate it or remove it.
		Also, the description of Sircam as given here is woefully inadequate.
	fileforum.betanews.com /detail/996451937/1 (265 words)

	SirCam now a worldwide epidemic \| Tech News on ZDNet
		With SirCam, "we have seen no sign of a drop-off," said White, whose lab had predicted the worm would be contained sometime this week.
		Currently, SirCam is MessageLabs' number one virus, easily outdistancing past champions, Magistr and Hybris.
		One reason for SirCam's continued success might be that it isn't limited to e-mail; it is also a "network-aware" worm.
	news.zdnet.com /2100-1009_22-503955.html (582 words)

	Viruses - SirCam
		The SirCam worm was first discovered in the wild on July 17th, 2001.
		At the time of this writing in September, 2001, SirCam is still rated the number 2 virus threat on the internet.
		Under certain conditions the C drive may be filled as SirCam adds test to c:\recycled\sircam.sys.
	www.leave-me-alone.com /virus_sircam.htm (498 words)

	SirCam due to wipe Windows PCs next Tuesday \| The Register
		SirCam, the bandwidth-munching privacy invading mass mailing virus, is due to attempt to wipe infected users' Windows PCs next Tuesday.
		Because of this the one in 20 "possibility", at least according to how the virus is programmed, that SirCam might wipe a victim's PC on October 16 is probably not going to be realised.
		MessageLabs, a managed services firm that scans its users email for viruses, has blocked 2,967 copies of SirCam in the last 24 hours and a 414,000 copies of the virus in all.
	www.theregister.co.uk /2001/10/12/sircam_due_to_wipe_windows (455 words)

	Gateway Scanners Plug Holes Against SirCam - Xatrix Security
		"Whether intentionally or accidentally through bad programming, the author of SirCam wrote the worm so that it morphs the header, and so we're missing it at that level," said Miller, who added that SMTP-based gateway virus scanners from all vendors may be vulnerable to the issue.
		SirCam spreads by grabbing a copy of a document from an infected user's computer and adding its malicious code to the file.
		While vendors' support message boards contain several recent reports from customers that SirCam is slipping past their gateway scanners, many administrators also say the worm is being picked up by anti-virus software running on desktop PCs.
	www.xatrix.org /article534.html (537 words)

	F-Secure Computer Virus Information Pages: Sircam
		Sircam is a mass mailing e-mail worm with the ability of spreading through Windows Network shares.
		The worm's body is 137216 bytes long but when it comes as an e-mail attachment, it larger in size due to a document that is attached to its body.
		Sircam sends e-mails with variable user names and subject fields, and attaches user documents with double extensions (such as.doc.pif or.xls.lnk) to them.
	www.f-secure.com /v-descs/sircam.shtml (1053 words)

	Wired News: 'Sircam' Worm Getting Hotter
		SirCam infection rates sharply escalated on Friday morning, and the virus is now No. 1 on Trend Micro's live tracking map of the Top 10 Virus threats.
		SirCam worms its way deeply into an infected computer's operating system and also changes its identity with each and every infected e-mail it sends.
		SirCam then scans the hard drive of the infected computer, and all drives that the infected machine has access to.
	www.wired.com /news/technology/0,1282,45427,00.html (779 words)

	PCWorld.com - Sircam Worm: Crawling Fast but Easily Crushed
		Sircam is a tricky e-mail worm that's trying to wriggle its way into PCs all over the world, but you can kill the cyber beast with one keystroke before it can harm your system.
		The Sircam worm, first detected in mid-July, is replicating at a rapid rate, say Internet security experts.
		She received a Sircam worm in an e-mail message a few days ago, and her PC soon began sending out infected e-mail messages to people in her address list.
	www.pcworld.com /news/article/0,aid,56284,00.asp (645 words)

	SirCam Worm - Anti-Virus products are not enough!
		London, 25 July 2001 - The current assault by the new SirCam email virus - a fast-spreading destructive worm - is a fresh reminder that organizations can only be safe against email attacks such as this if they have installed an email content checking gateway at email server level.
		Because the SirCam worm can disguise itself by morphing and adopting different Subject lines each time it spreads, anti-virus protection alone is not enough, warned GFI, developer of Mail essentials for Exchange/SMTP, the leading email content checking and anti-virus solution.
		The virus is activated when the recipient double-clicks on its attachment, which masks an executable file such as a.bat,.com,.lnk and/or.pif file.
	www.gfi.com /press/messircampr.htm (455 words)

Try your search on: Qwika (all wikis)