From: "Alison Phipps" <alisonphipps-AT-cfsg.net>
Subject: Re: Virus news
Date: Fri, 30 Nov 2001 13:07:21 -0600


I think we're dealing with the BadTransB virus.  It can be pretty nasty so
be careful not to open any attachments you're unsure about, even if they
come from someone you know.  Check out
http://antivirus.about.com/library/weekly/aa112401a.htm

Alison

----- Original Message -----
From: "Elizabeth DeLoughrey" <emd23-AT-cornell.edu>
To: <postcolonial-AT-lists.village.virginia.edu>
Sent: Friday, November 30, 2001 12:53 PM
Subject: Virus news


> Yes, Could the people who got that recent virus let us know the name of
it?
> I recently lost my entire hard drive from a virus and so thought I should
> pass on this information about the Sircam virus that appears as an email
> attachment where the body of the message is "Hi! How are you?..." (see
more
> below). I've received at least 20 copies of this virus in the past 3
> months--some from people I know who didn't realize it was being sent from
> their systems, and the rest from addresses I didn't recognize. I'm on a
> number of lists so who knows where they got my email address. Just in case
> it's circulating to members of this list, I've posted info on it below.
> Because of this virus or another, my 2 year-old hard drive was so
fragmented
> that it had to be replaced. I don't want to make anyone panic, but at that
> point I decided never to open any attachments, or at least to scan them
> first with Norton.
>
> Amrita, if you have windows pc, go to "start", then "programs" then
"Norton
> anti-virus" and click on "live update" to download the latest virus
> definitions and then run a scan. If you are associated with a uni or
company
> that pays Norton then these downloads are free. There's also a virus
(Nimba)
> that attaches itself to websites--more on Sircam and Nimba on the cornell
> website pasted below.
>
> Again, Sircam may have *nothing* to do with the recent email virus on this
> list, but I thought it would be worth mentioning in case others haven't
> heard about it. Liz
>
> http://www.cit.cornell.edu/computer/news/newsflash01.html#sircam
> W32.Sircam
> W32.Sircam usually comes by e-mail, probably from someone you know. It can
> also be spread through file sharing over networked computers.
>
> If Sircam infects your computer, it can send confidential or highly
personal
> documents to everyone in your address book, and to any addresses it finds
in
> your web cache file. Any document on your computer could be sent -- for
> example, your personal will or a department's salary information.
>
> Under some circumstances, Sircam can also delete files and directories and
> fill up the hard disk.
>
> Identifying Sircam e-mail... The subject of the message is the same as the
> attached file, minus the file extensions. The attached file can have any
> name, since it is a file chosen randomly from an infected computer.
>
> The message is in usually in English but may be in Spanish. It starts with
> "Hi! How are you?" (Spanish: Hola como estas ?) and ends with "See you
> later. Thanks" (Spanish: Nos vemos pronto, gracias.).
>
> Do not launch the attached file. If launched, W32.Sircam will try to
e-mail
> itself, and, under some circumstances, can delete files and directories,
> fill up the hard disk, and send copies of your files out to the Internet.
> The worm can also spread to other computers via file sharing.
>
> Detecting Sircam... This worm is detected by Norton AntiVirus software
that
> has been updated to the July 17, 2001 virus definition file (or a newer
> file). Update your Norton AntiVirus software by clicking the LiveUpdate
> button.
>
>
>
>      --- from list postcolonial-AT-lists.village.virginia.edu ---
>
>



     --- from list postcolonial-AT-lists.village.virginia.edu ---