Watch out, W32.Sircam.Worm@mm is about

Some of you in the windows world may have had the pleasure of getting aquainted with a particularly virulent strain of worm by the name of SirCam over the past week. For those of you who are unaware of this massively malicious mobile code, here's a quick breakdown of it's finer aspects:

  • Has access to addresses in both your address book and your browsers temp folder.
  • Contains its own SMTP mail engine, allowing it to mail itself without relying on Outlook.
  • Emails random files from your hard drive to all and sundry.

That's right, any file on your hard-drive to any address on your computer.. And they're only getting better, successful virii such as this invariably leave a lot to be desired. Poorly written message bodies are a regular failing, but then what else can you expect from non-english speaking script-kiddies. So when someone really wants to do the job properly, I think we'd best take cover.

But hey, let's not get down about it.. this virus does good things too!

4 comments

  • There's a good SirCam article on Wired.

    Posted by Anonymous on 26 Jul 2001 at 10:51 AM

  • Hey, Sergej at www.gameland.it, thanks for the BatmanVengeance.doc that you send me in order to have my advice. But I'm not really sure what sort of advice you're looking for.. :)

    Posted by Anonymous on 28 Jul 2001 at 09:48 AM

  • Hey he kindly sent me the Batman Vengance doc too, glad to know our opinions are valued :p

    Can you actually open these attachments or does that send the virus on? It would be nice if the documents could be viewed without fear of infection by the virus, so we could snoop on peoples private files with out worrying about our own being sent on..
    Its a bit like group therrapy for the net, isn't it, everyone's skeletons are out of the closet and being passed around their friends :) I wonder how many *embarasing* moments have occured due to this virus.
    I bet someone will set up a website listing them soon...

    Posted by Dan on 28 Jul 2001 at 10:52 AM

  • The virus is win32 only so us mac folk are safe from harm / embarassment. You can read it from within Word by choosing the "recover text from any file" option that it gives you when you try and open it (might have to remove the .ink extension first though). :)

    I've already seen a few lists of files recieved on the net over the past couple of days. At work alone our virus protection has netted at least 2 or 3 confidential documents amongst other less sensitive business materials.

    Posted by Anonymous on 28 Jul 2001 at 01:39 PM

Add a comment
You must have Javascript enabled to add a comment.
  (optional)

Metadata