OT: Got hit by SirCam32 virus....

[GeoffS]

Sometime between loading Win98 on a freshly formatted drive and installing Norton 2000, I got infected. If you get an email from geoffst @ adelphia.net with an attachment that you weren't expecting, PLS DELETE IT!

Quick way to see if you have it is to look for SCAM32.EXE in C:\recycled and your Windows directory.

Info on this piece of sh!t can be found at Symantec, along with a tool to automatically remove the virus.

:|

Geoff

 

[joinT]

bump

 

[Scooter]

bump

 

[yakko]

How did you infect yourself?

 

[Syringer]

Very interesting...thanks for the tip!

 

[AnimeKnight]

Someone that I don't know got infected as well.. and flooded my account.. I posted here last week but no one seemed to be cared oh well.. I blocked that person from my server now

 

[bonkers325]

this virus is sick and disgusting
i had to clean over 10 machines last week cause of the POS :|

 

[Elledan]

TTT

 

[AnimeKnight]

fvck.. I post the previous post at my gf's house.. I go home and found out that my sister's computer got infected too damn virus now I gotta go clean her computer up. argh

 

[ppaik]

the removal tool is very simple to run and so far on all the machines i ran the tool for...no problems.....it is a very smart virus, but I think the tool fixes everything.

Removal Tool Linked

 

[MikeyBaby]

Wow this is getting everywhere !!

I just cleaned it off a friends computer the other night using the tool provided at the Symantec website.

 

[GeoffS]

^

 

[NoreagaCNN]

Aight I dig the problem and all, but how many times haven't we been told not to open e-mail attachments if you're not expecting them? Seriously, if we listened this wouldn't happen so much. I'm not dissing or bashing anybody, i'm just stating the facts.

-Nore

 

[Dweebinatorer]

Actually my little office has been hit twice, thanks to the fact that the worm can be distributed in three methods:

If you recieve an e-mail with an attachment, and that e-mail reads as if it were written by a moron or a foreigner, DO NOT OPEN IT, DELETE IT.

That's the easy part...

Now, what I've found is that Sircam will attach itself to random application files like word .doc's or excel .xcl's (and much, much more!) What this means is that if you're a recruiter like myself, you will get an e-mail from a collegue from another state with a "resume" attached to it (again, for example.) Well Mr. Collegue man is a nube and didn't realize heand his documents were infected with Sircam, and he just ssent that infection me, AGAIN, totally indescernable from any other e-mail I get. SH!TTY.

Lastly, when you do get infected, Sircam will throw itself against ALL network ports on your system, meaning everyone on your LAN will be infected immediately Thankfully, the virus is somewhat tolerable because it can be fixed with a quick edit of the registry, your autoexec.bat, and the renaming of your Rundll32 file. We've not lost any info so far...

Anyhow, keep in mind the above so you'll know what to expect if you're one of the few who actually hasn't already been infected

 

[GeoffS]

Yeah... I don't even know how I was infected.. I trash any email that I'm not sure about without opening the attachment...

Geoff

 

[yakko]

<< Yeah... I don't even know how I was infected.. I trash any email that I'm not sure about without opening the attachment... >>

You missed one.

 

[GeoffS]

LOL! I guess... funny thing is it happened right after a fresh reinstall of Win98... there was about a 3hr period after the OS install that I installed other stuff and downloaded drivers, before setting up my Norton... all it needed apparently!

Geoff