New computer virus

[eddieperkins]

All,
A new virus is currently doing the rounds. Unfortunately variations of it
> are being released almost on a daily basis thereby making it difficult to
> keep the antivirus software up to date. This virus is a major threat so
> please take the time to read the following description. Should you receive
> a message as described below, please delete it immediately and inform IT.
>
> The virus arrives in a message which may
> be either English or Spanish. The English messages appear like this:
> Hi! How are you?
> I send you this file in order to have your advice
> See you later. Thanks
> The middle line may be chosen at random from one of the following:
> I send you this file in order to have your advice
> I hope you can help me with this file that I send
> I hope you like the file that I sendo you
> This is the file with the information that you ask for
> The Spanish message looks like:
> Hola como estas ?
> Te mando este archivo para que me des tu punto de vista
> Nos vemos pronto, gracias.
> The middle line may be one of the following:
> Te mando este archivo para que me des tu punto de vista
> Espero me puedas ayudar con el archivo que te mando
> Espero te guste este archivo que te mando
> Este es el archivo con la información que me pediste
> The attachment name is variable, but will have a double extension, for
> example "SCRIPT.DOC.PIF". The actual extension may be "PIF", "LNK", "BAT",
> "EXE" or "COM". The subject of message matches the attachment name, except
> without the extensions. In the above example the subject would be
> "SCRIPT".

I have recieved two of these in the past two days but intercepted them both.

Regards,
Eddie
>

 

[sonarbell]

So what happens when you have it?

 

[ArthurWood]

I've received this message three times, but have deleted it. However, I may have missed it earlier because I picked up a virus which automatically picked up incoming e-mail, added an attachment and forwarded it to the sender. Fortunately I caught it early, but had to reload my s/ware. I have since updated my anti-virus s/ware!!

 

[johnt]

2 extra bits of info .......it might be headed as coming from EMMA DANIEL..and it comes through DEMON.NET

If you get anything suspicious in OE5 go to 'file' click on 'properties' then 'details' that will tell you who sent it and the internet address it came from

I got it yesterday and just sent it back with a comment that I never open command files from people I dont know.

then I deleted my copy

so if you get it .hit reply, send a copy back, and then delete it

or should we all send a dozen copies back???

 

[philip_stevens]

I've found a free antivirus program that has automatic updates.

Try http://www.grisoft.com/html/us_index.cfm for the free download of AVG antivirus.

For a firewall, the free download is from http:/www.zonelabs.com

Be safe - not sorry.

regards,
Philip

 

[bernard_foster]

This is covered by McAffee engine 4140 and dat file 4148, issued 2 weeks ago

 

[Guest]

Whatever you do, DON'T REPLY TO IT. Just delete it without opening it or the files attached.

If you reply you will almost certainly be used as an email source by them. I.e. they will use your network or email address to send out millions of emails that look like they came from you without you even knowing.

Full details on this virus can be found at:-

http://www.sarc.com/avcenter/venc/data/w32.sircam.worm@mm.html

Cheers