E MAIL VIRUS. THIS IS REAL!

self ^ | sept. 18th, 2001 | rockfish59

[rockfish59]

this is real, folks! my e mail is infected right now and i will be working on a way to fix it. any help or suggestions would be appreciated. the e mail says this:

Hi! How are you?

I send you this file in order to have your advice.

See you later.

the same letter is going to jim robinson in my name. when he first contacted me i didn't know what he was talking about. last night it sent a steady stream to him. he said they were coming every 5 minutes or so and went from about 11:40pm to 2:15am.

[rockfish59]

i believe someone on this forum sent it out. probably some commie who doesn't like us. definately watch your e's from now on.

[garyb]

This would be the SirCam virus. Go to your virus scan provider and look for information on how to remove it there.

[GalvestonGal.com]

Yeah, it's the sircam. We received dozens a few weeks ago. My partner is a techie and has been diligent about running norton full time with frequent updates.

[Ophiucus]

Rockfish, you have been infected by the SirCam virus. It infects Outlook Express extremely well and turns into it's own server to send copies of itself to everyone in your mail address or any address it can find. It snags any document on your hard to mail as part of the virus so your entire HD is compromised until you fix it. If you have a copy of Norton or MacAffee, just run the anti-virus scan and follow the program's direction. If not, go to a site like www.symantec.com and they should have a freeware fix for SirCam.

[Positive]

CNBC - is talking about it right now - it is a worm similar to Code Red.

The file is "Readme.Exe" - don't click on it!

[Registered]

Hehehe. In all seriousness I get at least 20 of those a day.

[mckreck]

Relax. This is an email virus that apeared about 6 weeks ago and caused a lot of bother but had been more or less suppressed, although it has occasionally reappeared.

What it does is put a file on your computer that secretly sends out emails. So if you openned the files that were attached to the email, then you are infected. If not, you need to contact the person whose computer the files came from and tell them they are infected.

To get rid of the infection, go to or call one of the virus corporation websites and do a search for "I send you this file" etc. That should get you instruction on how to fix it, althoguh you should only be online for as long as it takes to get the info because as long as you are online the virus will be sending email.

Of course, if you didn't open the attached file, you are probably fine and can just delete the message.

[Kimlee]

Go here and download the Sircam removal tool. Make sure you have no antivirus program running in the background, or it will not remove all the necessary files. Just download it and save it on your desktop, and click on it to run the program. http://www.symantec.com/avcenter/tools.list.html

[Mr. K]

did you click on it and open it?

If not then you are safe.

REMEMBER: You cannot get a virus simply by receiving an e-mail message. They are always contained in an attachment. It is only when you open the attachment that you are in trouble.

I got this same e-mail too- first virus I have ever gotten this way, and I suspect it is from some disruptor at FR.

Have you ever included your e-mail address in a post or reply? I did often, and I am not worried... once again- only if you open the attachement are you in trouble- if you did not open it, then just delete that e-mail message- I got the same one last week.

[Registered]

It actually can be any number of file names that it sends out and adds its' own extension to the end of it. Therefore, the file name changes every time. But the text of the email is always the "Hi how are you" crap.

[Positive]

I was only repeating what the "expert" interviewed on CNBC said.

It is being repeated just now.

[the_alfalfanator]

I think you have the "sircam" virus
Instructions for manual cleaning of Win32.SirCam.137216 infection.
1. Delete the registry value "Driver32" in
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices".
2. Delete the registry key:
"HKEY_LOCAL_MACHINE\Software\SirCam"
and its sub keys.
3. Change the value "(Default)" in
"HKEY_CLASSES_ROOT\exefile\shell\open\command"
to its original state (usually "%1" %*).
4. Delete the files: Recycled\Sirc32.exe, Windows\System\SCam32.exe.
5. Scan with action to cure.
6. In systems where rundll32.EXE was detected and renamed,
search for the file run32.exe and rename this file rundll32.EXE.
7. Reboot and remove files with .AVB or .AV0 extensions
After completing this procedure, we recommend that users password protect shares (to avoid reinfection after reconnecting to the network).
I got this from a search for sircam at the site
http://ca.com/virusinfo/encyclopedia/

[The Energizer]

Just read that the FBI is investigating this now.

[GVNR]

From now on DO NOT open any attachment (ever) that has .exe or .vbl as an extension. I don't know what .vbl is, but a while back there was a worm or virus buried in it. .exe means "execute" something - maybe a little cartoon etc. - you don't know what its doing in the background.

Couple years ago I had "Chernobyl" - had infected better than 350 files. Even after killing it the computer's operation slowed down to a snail's pace. I finally had to reload Windows to fix it.

Important: Once you've fixed THIS problem, go out and get a quality anti-virus pgm and configure it to automatically scan the emails you receive.
Recently, my Norton caught 3 magistr infected emails - during the last 6-weeks or so.

[spiker]

If you want to try a really good anti-virus program, here is the one that I use.

It will remove ANY virus that has infected your computer.

You can try it for 60 days free of charge.

eTrust EZ Antivirus

[Mr.E]

I hve received hundereds of these from all over. It shows me that there are a lot of people who have no clue when the open mail....

[ofMagog]

Check HERE IMMEDIATELY for information.

[ofMagog]

BTTT

[MHGinTN]

Greetings from typical democrats.