Previous by Date | Next by Date | Date Index
Previous by Thread | Next by Thread
| Thread Index
| LM_NET
Archive
| |
Dear LM_NET Colleagues, I may have been in error with the following statement, and it appears that the earlier posting by Guinyard Butler may have included the virus. > (As you may know, we are not a strictly > moderated group, and most members post freely, so there is no way to block > the messages, just the attached virus file.) > > Here is what the CERT Advisory says about the virus. > > W32/Sircam can infect a machine in one of two ways: > When executed by opening an email attachment containing the malicious code > By copying itself into unprotected network shares > > Propagation Via Email > The virus can appear in an email message written in either English or > Spanish with a seemingly random subject line. All known versions of > W32/Sircam use the following format in the body of the message: > > English > Hi! How are you? > [middle line] > See you later. Thanks > > Spanish > Hola como estas ? > [middle line] > Nos vemos pronto, > gracias. > > Where [middle line] is one of the following: > > English > I send you this file in order to have your advice > I hope you like the file that I sendo you > I hope you can help me with this file that I send > This is the file with the information you ask for > > In the unfortunate event that you received the virus, or want to know more > about it, see: > http://www.cert.org/advisories/CA-2001-22.html > > Peter Milbury, Co-Moderator of LM_NET pmilbury@ericir.syr.edu > School Librarian - CA TeleMentor Chico HS, Chico, CA > Now With 13,000+ Members See: http://ericir.syr.edu/lm_net/ > ............................................................... > See also: Peter Milbury's School Librarian Web Pages > http://www.School-Libraries.Net > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-= All postings to LM_NET are protected under copyright law. To quit LM_NET (or set-reset NOMAIL or DIGEST, etc.) send email to: listserv@listserv.syr.edu In the message write EITHER: 1) SIGNOFF LM_NET 2) SET LM_NET NOMAIL or 3) SET LM_NET DIGEST 4) SET LM_NET MAIL * Please allow for confirmation from Listserv. For LM_NET Help see: http://ericir.syr.edu/lm_net/ Archives: http://askeric.org/Virtual/Listserv_Archives/LM_NET.shtml See also EL-Announce for announcements from library media vendors: http://www.mindspring.com/~el-announce/ =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=