Open Q. to all IT techeads.

 

I have checked my email to find 3 emails from an address I don't know. All with attachments, they are called:

 

 

Deferral request cat. k 16.8.00.doc.bat

 

DURUM WHEAT RECORD CARD.doc.com

 

HINZE 57.doc.bat

 

 

The emails were also all accompanied by the following text file:

 

Hi! How are you?

 

I send you this file in order to have your advice

 

See you later. Thanks

 

 

Anyone come across this?

 

The email address was: matt@harlow-ag.co.uk

 

Your help would be appreciated.

 

Thanks

 

Tim

 

PS These are obvoiusly PC files and I run a Mac system.

Deffo a virus - I think its the Sircam virus but not too sure - I'll check and find a removal tool for ya - gimme 10 mins......

 

CheerZ,

 

Andy

curious file names - the sort you open and you ssystem get buggered!

 

I'de mail him back asking 'who the f**k are you'?

 

Not a very technical answer I know!!!

 

 

 

Yep - deffo sircam - had loads of this at work try this link - if it don't work let me know m8

http://download.nai.com/products/media/mcafeeb2b/zip/scrmove2.zip

 

CheerZ,

 

Andy

i hope you have deleted it?

Thanks Guyz.

 

All gone, wasn't a major prob as I only run Macs here at home and it doesn't seem to effect them.

 

All clean.

 

Tim

OK - just FYI this is only a mass emailer and won't do any real damage to your system - If you're running a mac of course then I'm not sure if you'll even get infected.....

 

Would still delete the files and get an up to date anti virus prog.....

 

CheerZ,

 

Andy

 

BTW - if you are running a mac then I doubt that link I posted will be of any use - sorry! I should read the question properly

Thanks Andy, I updated the Virex definitions, deleted the offendinging files and ran the virus scan - all came up clean.

 

Thanks again

 

Tim

I have had load of them.

I just deleted them stright away. My friend sent an email back saying stop sending me this this.

They try to con you but calling the file help.doc.bat It makes it look like a docunemt when it is infact a MS DOS batch file. As long as you dont run them you should be fine. I dont think it will run on UNIX/LINIX or MACS.

It's usually best never to reply to these things as that just confirms your email address to them.

 

Delete and Block are best options.

They already know your email address cos they sent it you. If it doesnt get there, a messages saying no such address.

I did try that but every one came from a different address from India.

The unfortunate thing about blocking is that the mail is still downloaded to your computer but put stright in the bin. Most operating systems dont actually delete information of the Hard Drive when asked. It removes it from the index so it cant be found, but but the whole file is still active and can still infect your system.

 

Stuart

Sircam@MM Worm;

 

They don't necessarily know your email address. This worm bypasses the usual method of sending mail, and has it's own SMTP client built in. It pulls addresses to send to from your Outlook contacts list, *AND* from your temporary internet files folder - looking for any HTML files containing "mailto:" lines. So if you have your email address on any webpage they have ever visited.. Bingo. You get spammed too..

 

Az

 

------------------

Stage: Rather Ill

Almost all Worms / Viruses require you to run them (unless it's Active X Stuff) the simple rule is to never open a .exe, .com, .bat, .vbs etc, unless, you know where it came from.

 

Never open anything with a double file extension e.g. runme.txt.vbs

 

You should also re-associate the VBS file extension with Notepad and not the Scripting Host.

 

These simple rule should see you free from 99.99% of viruses, well computer ones anyway :>

 

Herman