"I send you this file to see what you think"

[hotfusion]

Obviously a virus, as this e-mail had an attachment with the extension .doc.pif. I am interested to know which virus this is, and what effects/damage it would cause had I downloaded it. Cheers, Andy. My suggestions are what I would try myself. If incorrect, I welcome corrections to my rather limited knowledge. Andy.

 

[jaeddy]

Ahh, the annoying and dangerous SirCam.32 virus. Check Symantec for a removal tool.

 

[hotfusion]

Ah! that one is it? The full message is actually this:

Hi! How are you?
I send you this file in order to have your advice
See you later. Thanks

I haven't actually got the virus as I didn't download the attachment (lucky!) but what would this thing do if I had?
Cheers.
My suggestions are what I would try myself. If incorrect, I welcome corrections to my rather limited knowledge. Andy.

 

[edfair]

You have the virus, it just hasn't been activated.
You can get to virus help through the FAQs.
It would send the same kind of message to people in your address book if you are using outlook or outlook express. Ed Fair
efair@atlnet.com

Any advice I give is my best judgement based on my interpretation of the facts you supply.

Help increase my knowledge by providing some feedback, good or bad, on any advice I have given.

 

[butchrecon]

Yea hotfusion I get this email about 5 times a day. I email back the system administartor of EVERY one of the addresses I recieve the email from. Most of the time the user sending it does not know why they are sening you mail. James Collins
Systems Support Engineer
A+, MCP

email: butchrecon@skyenet.net

Please let us (Tek-tips members) know if the solutions we provide are helpful to you. Not only do they help you but they may help others.

 

[edfair]

Most of the time they don't know they are sending it. Not just why. They only find out when you tell them. Ed Fair
efair@atlnet.com

Any advice I give is my best judgement based on my interpretation of the facts you supply.

Help increase my knowledge by providing some feedback, good or bad, on any advice I have given.

 

[Bgal]

I had this one..Norton Antivirus picked it up and deleted it But it still stopped me opening any programms. The address it came from was just up the road so I went there to put his windows through...oops, he didn't even know he had it.

I reloaded windows which seems to have done the trick.

 

[lgebhart]

Unfortunately, when Norton finds the files and quarantines them you cannot open any executables you opened while the virus was on the computer. You do not have to reinstall windows to fix this.

Norton/Symantec has an executable fix, at their site, you can put on a floppy disk and it deletes all inferences to the sircam in the registry and anywhere else it spreads itself. I used it last weekend on a computer and it works beautifully.

Lori Gebhart ggebhart@clover.net
I hope I never get too old or arrogant to learn something new!

 

[hotfusion]

Cheers people, I didn't realise this virus was still at large in such numbers! At least now we can recognise the format of the message the virus composes. I've told friends and colleagues to head their e-mail in a specific manner to ensure any received from them are actually writtem by them and not the virus. My suggestions are what I would try myself. If incorrect, I welcome corrections to my rather limited knowledge. Andy.