User Panel
Posted: 7/22/2001 2:58:06 PM EDT
Just an FYI, there's a new virus spreading like wildfire...
W32/Sircam Virus It's an email worm so be cautious of emails from people you know with attachments. Usually the topic says something like "Hi, attached is a file you have to see" or similar verbage. If you run the file you will be infected AND people in your contact list will get 2-3 msgs from you with the worm attached. The worm can come in with different file names as well as different extensions. [b]REMEMBER to NEVER open an attachment where the last 3 letters are not something you recognize. (This includes .EXE files.)[/b] This worm has sent me .pif and .lnk extensions. (Usually with a .doc or .jpg preceding the extension to try to throw you off. (Like most modern worms.)) If you do manage to get infected, make sure to head to the antivirus sites and pull down either a demo or free copy of the software to clean it from your PC. Just an FYI, I've gotten about a dozen of these emails in the past two days... -- GB (AR15.Com email server does scan for and reject msgs with viruses, but if the virus is newer than the definitions on the server it may get through. So ALWAYS be careful. (This one WILL get caught by the protection!) |
|
Probably should never accept any attachments except .zip
Then scan the zips before ever doing anything. |
|
Well I get a TON of files from people, so I can't follow that rule. Luckily I know what I'm doing and have ripped virus's apart in a few jobs to write fixes when the morons at Norton and McAfee were slow in doing so...
I'd think most people are kewl with opening .gif, .jpg, and .doc (along with other office files) since any mp3 or mpg can be sent to you as a link 99% of the time. As long as people learn to check the file before they open it and just look at the LAST EXTENSION on it, they should be fine. Basic rule of thumb is if it looks suspicious, nuke it. You can always ask for it again from the person if it was legit! |
|
I've received this virus a couple of time's as attachments from unknown e-mail address's. GoatBoy can you explain in idiot terms how to manually configure an e-mail account for anti-virus protection. I have Norton 2000 but one of my e-mail accounts isn't listed as one being protected by Norton. I'd try and do it myself but..[%|]
|
|
I've also have recieved a few of these, and they have all been premissed with as you said, "you really need to check this out" or "you really need to see this".
|
|
For instructions on how to remove this virus from your computer registry, go to
[url]www.sarc.com/avcenter/venc/data/[email protected][/url] |
|
Does the virus/worm do anything bad besides just spreading itself??
|
|
I got an email from someone I have no idea of and it has an attachment called "Bill Clinton.doc.com". Do you all think it is like a virus or something malicious?
|
|
Just got it and McAfee caught it for me. I forwarded it to my yahoo account and looked at it. Looked pretty bad. Glad my anti-virus software got it.
|
|
Originally Posted By Imbrog|io: I got an email from someone I have no idea of and it has an attachment called "Bill Clinton.doc.com". Do you all think it is like a virus or something malicious? View Quote A "COM" extension is also an executable and most likely a BAD file... With the name bill clinton on the front of it it's nuke worthy anyhow! -- GB |
|
I just got that virus (w32.sircam) from my brother in law. It cam as an attachmenet called MVA form. I scanned it and it came up good. I almost clicked on it but I updated my anti-virus..got one update and scanned the attachment again. Bingo..that w32.sircam virus.
This one had an xls extension. I think that is excel, but when I saved it to scan it was a DOS file. You never know. Norton is wowrth every penny..as lone as you update it[:)] |
|
I just got sent this virus. It was an odd looking e-mail, so I sent it to my hotmail account where it could be (even more) safely scanned. Of course it turned up positive for the virus. Here's what the e-mail said:
From:[email protected] Subject: Return Policy Page Hi! How are you? I send you this file in order to have your advice See you later. Thanks If this is somebody any of you know, please let them know. It may be somebody on these boards that doesn't know what's going on, or it may just be a phony e-mail addy. It just seems strange that it's kinda gun related. brouhaha |
|
J. Antonio B. Arnaiz
Just recieved a email from this guy.I have emailed Steyr Aug once.This is the only time I have used this email adress.Its listed as my email adrees here.So someone is sending this to the emails on the site!It sauid it had something to do with timesheets. I forgot .I scanned it and it has this virus. |
|
This virus is most definitely NOT being sent out on purpose. Once on a computer, it goes to MS Outlook and self-propagates itself to all the addy's in the addy book. I just figured out that the person who sent me the e-mail is a legit poster on HKPRO. He is a respected individual, and I'm sure he has no clue what is going on. I have e-mailed him to make him aware.
So don't go blaming others. It's not their fault, other than the fact that they hadn't updated their virus scanners or never use them. brouhaha |
|
Quoted: I just got sent this virus. Here's what the e-mail said: From:[email protected] Subject: Return Policy Page Hi! How are you? I send you this file in order to have your advice See you later. Thanks View Quote Same here, but from someone I'd never heard of before. I've heard that this virus (or at least one of the ones currently going around) automatically scans peoples' address books and forwards mail out to everyone in it. Anything ending in .com or .exe gets deleted without opening. This is why I use UNIX and Linux systems -- the people who wrote UNIX/Linux tools didn't ship them with virus-spreading crap code enabled by default. . . . F*cking Microsoft morons. . . . [frag] |
|
I got a strange e-mail today entitled "This is nice to read". My Norton anti virus alerted right away I quarantined the virus and deleted the message without opening it.
|
|
I'm getting hammered by these things, 5 so far in just one email acct, from people I know, usually starting off innocently enough like, "Penn Reel Bearing Greasing Update", in the body of the email though I've gotten the same lines as some of you got,
"Hi, how are you?".. I'm sending you this file to get your advice, See you later. same sorta shit...this virus is really making the rounds. |
|
By the way, Microsloth Outlook XP does not let you open or save ANY attachment that has an executable file extension and as far as I can tell, there is no way around it aside from zipping it or renaming it:
.ade Microsoft Access project extension .adp Microsoft Access project .bas Microsoft Visual Basic class module .bat Batch file .chm Compiled HTML Help file .cmd Microsoft Windows NT Command Script .com Microsoft MS-DOS program .cpl Control Panel extension .crt Security certificate .exe Program .hlp Help file .hta HTML program .inf Setup Information .ins Internet Naming Service .isp Internet Communication settings .js JScript file .jse Jscript Encoded Script file .lnk Shortcut .mda Microsoft Access add-in program .mdb Microsoft Access program .mde Microsoft Access MDE database .mdz Microsoft Access wizard program .msc Microsoft Common Console Document .msi Microsoft Windows Installer package .msp Windows Installer patch .mst Visual Test source files .pcd Photo CD image or Microsoft Visual Test compiled script .pif Shortcut to MS-DOS program .reg Registration entries .scr Screen saver .sct Windows Script Component .shs Shell Scrap Object .url Internet shortcut .vb VBScript file .vbe VBScript Encoded Script file .vbs VBScript file .wsc Windows Script Component .wsf Windows Script file .wsh Windows Script Host Settings file Sounds like over-kill to solve the problem. |
|
Someone tried to send it to me. I nuked it.
Semper Fi! Ken Little |
|
Remember that once infected this thing will automatically email itself to people in your address book, so it is NOT by intent on these people's behalf. EdSr recently was hit with a virus and I yelled at him for opening something he wasn't absolutely sure about, but as most people who are not computer literate, he knew it came from someone he trusted and so he thought it was fine.
Also, the LAST THREE LETTERS on the file (the actual extension not the fake one) tell you what type of file it is. If you don't recognize it, trash it! Look at it this way, you have the person's email address, so if it was a legit file, you can always ask them to resend it!!! Even one person getting this will send dozens of emails. My address book is a nightmare if I ever got a virus... I've probably got a few hundred emails in there!!! |
|
Well someone just sent something to me that was a .PDF file and Norton caught it as having a worm virus.
Thanks to Goatboy I updated my anti virus last night and it caught it this morning when I oppen up my e-mail |
|
I've received the damned thing twice this morning.
Edited to state: I just got it AGAIN! |
|
Just received my first one today. It was from CAMPYBOB so everyone who ever emailed him before should be getting one from him. [:D]
|
|
My Norton anti virus alerted me to another one. That's two in two days, both from coworkers.
|
|
BTT
Still spreading like mad people, so be careful!!! ]=) (This is such a nice virus I added it to my collection!) |
|
I got it.... Norton found it, said it had fixed the prob. Now anything I try to excecute gives me the "program not found" box. It is looking for "SirC32.exe" What's up with that & how can I fix it?
Norton has the fix on their site. Running it now. |
|
I just got it, and deleted it right away.
This is one reason I use web based mail and not outlook. It never downloads anything untill I want it to. It also allows me to acces messages from any computer, no matter how often they have alreday been read. AT&T offers web based e-mail that is on a secure server. Also, if I do get infected it can't spread as I have no adress' in my Outlook files. |
|
Got it 5 times so far today in my Yahoo mailbox. Norton confirmed it. All were from Chad Ritter, 2 were .com files, 3 were .lnk files.
|
|
Not a sign of it here. Is this the recent one that also goes through drives & deletes files?
|
|
Our office has been having Email worm virus problems for years, Melissa, ILoveyou virus, etc. Problem is that our address book is a global book and our company (Polk County School Board actually) has thousands of email addresses, so it keeps going round and round until they can get latest updates on the server and instruct all users (most completely ignorant on computer functions) not to open these files.
I've had 200 viruses in my inbox at a time. Have yet to have caught one this way (though I have caught a few visiting the wrong places, and downloading the wrong software :( Hope this batch doesn't hit us. Steven L. |
|
I have been sent the freak'n thing 4 times in the last 2 days. Glo1.I have Norton 2000 which has never let me down. Although I'm still waiting for GB to explain to me how to manually configure an e-mail account that isn't protected by Norton....*hint*...*hint*.
|
|
It got me.remember that this hides in your recycling bin.so make sure that whatever anti-virus program you are using is set up to scan the bin.mmk
|
|
I just got multiple emails in both of my email accounts, both of which I have registered at this sight. None of my other email accounts got emails from this person.
their email address is [email protected] Messege is: Hi! How are you? I send you this file in order to have your advice See you later. Thanks Warchest desc.doc.lnk Name: Warchest desc.doc.lnk Type: application/mixed Encoding: base64 OSA |
|
I dont run an antivirus Striker or I would help out... I believe in safe surfing, so I rarely download or accept files. ]=)
As for a good program, I prefer norton but mcaffee is second on the list... There's also a few free/cheaper solutions, but for the cost and no worries, I prefer to go with one of the big boys... (I do own Norton AV, I just don't use it!) |
|
Quoted: Our office has been having Email worm virus problems for years, Melissa, ILoveyou virus, etc. Problem is that our address book is a global book and our company (Polk County School Board actually) has thousands of email addresses, so it keeps going round and round until they can get latest updates on the server and instruct all users (most completely ignorant on computer functions) not to open these files. I've had 200 viruses in my inbox at a time. Have yet to have caught one this way (though I have caught a few visiting the wrong places, and downloading the wrong software :( Hope this batch doesn't hit us. Steven L. View Quote You email admin needs to down the server. Run a program called exmerge and check for the viruses. Then have it delete the offending emails. Then bring the server back up. That should take care of the problem. |
|
Just got another copy of it from the same sender, that's 6 so far today. Another .lnk file, same virus.
Chad Ritter Mon 07/23 217k labels Chad Ritter Mon 07/23 183k ~$Lynn Chad Ritter Mon 07/23 183k ~$Lynn Chad Ritter Mon 07/23 218k Resume Chad Ritter Sun 07/22 218k Resume |
|
Chad Ritter for me, too.
Thanks for the heads-up G.B., it removed any temptation to open unknown email files. I know I'm not supposed to and I'm usually a good boy. |
|
I just nuked my third message from JaxABCF, re. Old Springfield Armoury above.
|
|
Quoted: Goat whats a good AntiVirus program? View Quote Norton seems to be the most effective and most stable. Sophos is a close second. |
|
[red][b]IMPORTANT ![b][/red]
If anyone here is using their AR15.com mail account (web based or pop3) and HAS received a virus from any source in the past 24 hours, can you please post the info here ..?? (please do not post if you have received a message from the mail system anti-virus gateway) We've noted that over 309 e-mail transmissions containing virus content were detected and deleted in the past 24 hours ! Everything has been updated on a regular basis, I'd just like to know if anything "slipped through" Thanks! RBAD |
|
Good job Rbad,thank you.man this guy got hit hard.mmk [url]http://subguns.biggerhammer.net/inquiry.cgi?read=11631[/url]
|
|
I've been trying really hard to keep everything updated, but this new one is quite complex (changing names / subjects / etc...) AND it's even "network aware"... Supposedly can replicate itself across a LAN or WAN provided the resources are mapped with drive letters.
I hope we were able to stem the influx of viruses to the member e-mail accounts in time. This one seems to be pretty nasty too... |
|
I have gotten the damn thing 9 times since last night to this morning. 5 on my yahoo account and 4 on my account at work. This is some nasty shit.
|
|
Oops... Forgot to mention:
The e-mail virus scanning system is just another of many benefits of becoming a member of AR15.com. Whip out your checkbooks and send in your $$. [BD] [BD] |
|
Sign up for the ARFCOM weekly newsletter and be entered to win a free ARFCOM membership. One new winner* is announced every week!
You will receive an email every Friday morning featuring the latest chatter from the hottest topics, breaking news surrounding legislation, as well as exclusive deals only available to ARFCOM email subscribers.
AR15.COM is the world's largest firearm community and is a gathering place for firearm enthusiasts of all types.
From hunters and military members, to competition shooters and general firearm enthusiasts, we welcome anyone who values and respects the way of the firearm.
Subscribe to our monthly Newsletter to receive firearm news, product discounts from your favorite Industry Partners, and more.
Copyright © 1996-2024 AR15.COM LLC. All Rights Reserved.
Any use of this content without express written consent is prohibited.
AR15.Com reserves the right to overwrite or replace any affiliate, commercial, or monetizable links, posted by users, with our own.