[JA] W32/SirCam@MM virus does funny thing with Juno Address Book
- From: Babette C Bloch <bvcb@xxxxxxxx>
- To: juno_accmail@xxxxxxxxxxxxxxxxx
- Date: Tue, 7 Aug 2001 14:30:08 -0700
I received a message today with the W32/SirCam@MM virsu as an attachment.
The attachment was titled "Action items on returning from June trip.
Trying to be a good ciitizen and reporting a new virus if it were such, I
usually save such suspect attachments to a "dump" folder and then run
McAffee Scan.
When I did it with this one, the file did not appear in the "dump"
folder...instead I had a file named Addrbook.nv, with today's date on it!
Using a file reader to look at it, I found it was not the usual file
format of Juno's Address Book files, but machine language.
I sent it to McAffee, who immediately replied telling me it was the
W32..., etc. My drive appears to be clean now, but this was certainly a
different kind of action from any I've seen before.
It appears to be going the rounds today...McAfee's web page commented
that service might be slow due to the volume of contacts about it.
To unsubscribe, send a message to listar@xxxxxxxxxxxxxxxxx with
"unsubscribe juno_accmail" in the body or subject.
OR visit http://freelists.dhs.org
~*~
Other related posts:
