virus warning (received WDW email with one)

[kanor]

HI all,
was not sure where to post this but I will let the moderators figure it out. I had read an email from someone who works at the college where my husband works about a new virus. Here is part of it.
You should be aware of a new virus spreading itself around the
country that . The virus is called SIRCAM and will have any of the
following text within the message. If you receive any message similar to
the ones below we suggest that you delete the message and do not open the
attached file. This is considered a high-risk virus.
Subject: [filename (random)]
Body: Hi! How are you?
I send you this file in order to have your advice
or I hope you can help me with this file that I send
or I hope you like the file that I sendo you
or This is the file with the information that you ask for
See you later. Thanks
--- the same message may be received in Spanish ---
Hola como estas ?
Te mando este archivo para que me des tu punto de vista
or Espero me puedas ayudar con el archivo que te mando
or Espero te guste este archivo que te mando
or Este es el archivo con la información que me pediste
Nos vemos pronto, gracias.
--- end message ---
Although other message body possibilities are present in the virus,
these aren't actually being generated frequently.
The weirdest thing was I received one supposedly from the WDW swan about a reservation # and I almost opened the attachment and remembered this email. Mine said "I send you this file in order to have your advice " so I asked my husband and he said not to open the attachment. Anyway, I just wanted you all to be aware, kinda weird.

 

[skuttle]

I got that virus email from one of my friend's email address. She warned us about it so I didn't open the file. It sent me one of the files off of her hard drive...weird.

So, if you get an email from someone you know and the text of the message says that stuff above, don't open the file!!

 

[Goofyswife]

We've received 5 of those messages in the past 2 days. We ignored them as we didn't know the person that sent them.

Thanks for the warning!

 

[louisaho]

I have recieved twice now, and i opened once, what can i do?

 

[disneyberry]

there was another post about this virus either on this board yesterday or one of the other DIS boards.

go to www.symantec.com and there should be info on how to get rid of the virus.
if you've opened it, most likely it's in your system, or it's used your email to pass it along to someone else.

btw, it doesn't actually send a file from the person's hard drive. what it does do is select a random name of a file from their hard drive to make you think that it's okay to open the file.

DO NOT OPEN THE ATTACHMENT NO MATTER WHAT!

good luck to those trying to get rid of it.


btw, found the other post:
http://www.disboards.com/forums/showthread.php?s=&threadid=68350

 

[ugadog99]

Got one of these yesterday. I didn't recognize the sender so I deleted the message. So glad I didn't open the attachment. Thanks for the advice.

 

[Limmer]

That is scary because I have received this about 10 times from all different people, none of whom I knew. I tried to open it the 1st time but I couldn't and never bother again. Would my virus check not detect this?

 

[Wonderlandmom]

We had to update our virus definitions before it was detected! Then the big warning went up. Go to the symantec site listed above and rid yourself of this and the spread of it! You are probably passing it on and not even aware! Good luck!

 

[WillR]

Limmer -

You may have the virus. Even if it seems like it didn't open if you clicked on the attachment you may have activated it. I've spent the last several DAYS trying to get rid of a virus that I got from opening - actaully trying to open, I saved it to my Desktop and clicked to open. I saw a screen with Windows stuff but it wouldn't do anything (or so I thought).

The virus I got was W32/Magistr@mm

My anti-virus software was outdated and even after I purchased the newest McAfee online stuff it still didn't detect it right away.

It's a nasty virus if you don't take care of it - make sure your antivirus software is up to date, you can download the latest SuperDat file from McAfee or www.nai.com and after it downloads run the virus scan again.

The friend who's computer sent me the file did that and detected 140 infected files. I started sooner and found less than 20 infected files.

I had to totally clean out my email boxes, delete everything and uninstall Naviator because I sent the virus so many times it created some kind of loop and Navigator can't receive emails. What a mess.

Good luck -

 

[louisaho]

is there any symptom of infected?

 

[WillR]

I knew pretty fast that something was wrong for a variety of reasons:

A couple of people in my address book emailed me that I had sent them an email with a virus and I knew I hadn't emailed them anything - turns out my computer did because of the virus.

I received one email with undeliverable mail - that helped me figure out some files that were infected

When I though about it I remembered opening an attachment that was strange - it was from a good friend which is how this virus tricked me in the first place.

When I turned on my computer a strange CSRIPTS window would pop up and disappear.

My mouse felt like it was hesitating - this may have been more in my head than reality becasue by now everything felt wrong.

My computer was crashing - much later I think I discovered the reason for this was McAfee's VShield was not compatible with the new update McAfee Active Shield.

If you do a Find File search for .EXE files and you have the virus there will be a # of files with an unknown origin date that show they were created the day you got the virus. If you click the modify button in the upper right corner the computer will sort by date so you can see if you have a bunch of suspicous files created on the same date around the same time.

Hope this helps - the virus I've been dealing with is W32/Magistr@mm

The newest virus is SirCam. Just be sure not to open thse attachments and keep your anti-virus software up to date.

 

[iNTeNSeBLue98]

We'd had numerous emails from our techs at work about this nasty virus. They went so far as to strip ALL attachments from incoming emails for two days to avoid damage. They kept us informed of their contact with symantec and their attempts to find a "cure".

Wed. night I had 4 emails from the same sender, someone I didn't know, each with a different subject, but all the same message- the one about sending you this file for your advice. I deleted the first two and then blocked the sender in Outlook Express. The third message popped up and went directly to the deleted items folder. I went over to yahoomail and blocked the sender from hitting my account. I didn't receive an email after that. I couldn't sleep because I was so worried about infecting our home pc. I was grateful that I was aware of the message taglines and knew not to open the attached file.
I knew that a fix was developed by checking symantec's website. The techs at work alerted us to the same in the morning, but still advised us to be cautious of all emails that enter our inbox. If it looks questionable and you know the sender, call them and confirm what the email pertains to.