"Harley, Ageless Wings" wrote:

Paul (and others)...

RE:  the "virus"...

Are you sure that is not just junk mail?<<

Nope, it's real...it's a worm.  It's official name is the W32/SirCam@MM.  It
replicates and sends itself on using random subject lines after apparently
reading your email.

I've been receiving it a couple times a week recently, but I just delete it
(then delete it from the deleted file folder, too).  As long as you don't
click on the attachments, it can't infect your machine.

A summary:

This virus sends itself, as an executable, to email recipients found in the
Windows Address Book and addresses found in cached files. This executable is
appended with a document, if one is found, in the MY DOCUMENTS folder. The
mailing routine talks SMTP to a server and will use the server address found
in infected executables. This address is presumably captured from the
victim's machine which sent the virus to you. If that server is not in
operation, or if relaying is not permitted, the virus attempts to use each
of these three servers in succession, stopping when the first successful
send occurs.

To read all about it, go here:

http://vil.mcafee.com/dispVirus.asp?virus_k=99141&

To see if you have it, check your Windows/System directory for the presence
of the file SCam32.exe.

It doesn't infect Linux machines, but it does use email addresses it sees on
your machine that are not just in your address book, but in temporary files,
too.

And could be getting to some us that way, as some of us have replied
off-list to each other.

If you have the SCam32.exe file, you're the one sending it on.  Instructions
for removing it are on the same page above. There are many more files other
than that one to completely remove it...it even has a little program that
rewrites the others if deleted, and that has to be removed, too.

Right now, it has infected over 8% of a 400,000,000 computer sample.  It's
considered high risk.
                             _
        Harley Dixon          \
------------------------------ \    |
 --- www.AgelessWings.com --- I<=====>
------------------------------ /    |
                             _/

"It doesn't infect Linux machines"

I want to make it perfectly clear. 

This virus does is NOT executable on Linux!!! 

You are not getting these things from me!! I run Linux!

Paul Lamar
 
The AirCraft Rotary Engine NewsLetter.              Powered by Linux.
ACRE NL web site.
http://home.earthlink.net/~rotaryeng/            http://www.linux.org