Re: Virus sent message (Guinyard Butler)

[Peter Milbury <pmilbury@ERICIR.SYR.EDU>]

Dear LM_NET Colleagues,

I may have been in error with the following statement, and it appears that
the earlier posting by Guinyard Butler may have included the virus.

> (As you may know, we are not a strictly
> moderated group, and most members post freely, so there is no way to block
> the messages, just the attached virus file.)
>
> Here is what the CERT Advisory says about the virus.
>
> W32/Sircam can infect a machine in one of two ways:
> When executed by opening an email attachment containing the malicious code
> By copying itself into unprotected network shares
>
> Propagation Via Email
> The virus can appear in an email message written in either English or
> Spanish with a seemingly random subject line. All known versions of
> W32/Sircam use the following format in the body of the message:
>
> English
> Hi! How are you?
> [middle line]
> See you later. Thanks
>
> Spanish
> Hola como estas ?
> [middle line]
> Nos vemos pronto,
> gracias.
>
> Where [middle line] is one of the following:
>
> English
> I send you this file in order to have your advice
> I hope you like the file that I sendo you
> I hope you can help me with this file that I send
> This is the file with the information you ask for
>
> In the unfortunate event that you received the virus, or want to know more
> about it, see:
>    http://www.cert.org/advisories/CA-2001-22.html
>
> Peter Milbury, Co-Moderator of LM_NET      pmilbury@ericir.syr.edu
> School Librarian - CA TeleMentor              Chico HS, Chico, CA
> Now With 13,000+ Members      See: http://ericir.syr.edu/lm_net/
> ...............................................................
>           See also: Peter Milbury's School Librarian Web Pages
>                               http://www.School-Libraries.Net
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=
All postings to LM_NET are protected under copyright law.
To quit LM_NET (or set-reset NOMAIL or DIGEST, etc.) send email to:
listserv@listserv.syr.edu   In the message write EITHER:
1) SIGNOFF LM_NET 2) SET LM_NET NOMAIL or 3) SET LM_NET DIGEST
4) SET LM_NET MAIL  * Please allow for confirmation from Listserv.
For LM_NET Help see: http://ericir.syr.edu/lm_net/
Archives: http://askeric.org/Virtual/Listserv_Archives/LM_NET.shtml
 See also EL-Announce for announcements from library media vendors:
    http://www.mindspring.com/~el-announce/
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=