PureBytes Links
Trading Reference Links
|
This press release comes from F-Secure. For more
information on F-Secure's mailing list policy,
see end of message.
Press release
For immediate release
F-Secure warns of Sircam worm
Helsinki-Finland, July 24, 2001 - F-Secure Corporation (HEX:FSC) is
alerting computer users worldwide about a new, rapidly spreading e-mail
worm called Sircam. Sircam is a mass mailing e-mail worm with the ability
to spread through Windows Network shares. F-Secure anti-virus detects and
disinfects the worm.
The worm was found in the wild on July 17 in the USA. After that the worm
has been spreading globally. In addition of USA, infections have been
reported in Asia, South America, India and Europe. Northern Europe and
Scandinavia have been spared the worst hits because of the holiday season
in these countries.
When a Sircam-infected e-mail attachment is opened it shows the document it
picked up from the sender's machine. The file is displayed with the
appropiate program according to its extension (.DOC, .XLS, .ZIP). This
effectively disguises the worm's activity. While the user is checking the
document, the system gets infected.
The worm collects e-mail addresses from the user's Windows Address Book and
then sends itself out with one of the document files it found in the user's
'My Documents' folder. The message the system sends may be either in
English or in Spanish.
"This is the first e-mail worm that is not Windows Outlook-specific," says
Mikko Hypponen, Manager of Anti-Virus Research at F-Secure. "Instead, this
worm makes use of any e-mail system. This makes it much more liable to
spread."
The worm has two payloads. On October 16 it may delete everything from the
drive where Windows is installed. Or, on any other day it may fill up the
drive where Windows resides. It may also use Windows network shares to spread.
The technical description and screenshots of the Sircam worm are available
online at:
http://www.f-secure.com/v-descs/sircam.shtml
About F-Secure Corporation
F-Secure Corporation is a leading provider of centrally managed security
for today's mobile, wireless enterprise. The company offers a full range of
award-winning, integrated anti-virus, file encryption, distributed firewall
and VPN solutions for workstations, servers, gateways and mobile devices.
F-Secure products are uniquely suited for delivery of Security as a
Serviceā¢ which provides invisible, reliable, always-on, and up-to-date
security for the most widely distributed user base. Whether provided by
corporate IT or delivered by service providers, F-Secure solutions extend
policy-based security and instant alerts to all devices where information
is created, stored or accessed. Founded in 1988, F-Secure Corporation is
listed on the Helsinki Stock Exchange [HEX: FSC]. The company is
headquartered in Helsinki, Finland with North American headquarters in San
Jose, California, as well as offices worldwide.
For more information, please contact:
Mikko Hypponen, Manager, Anti-Virus Research
F-Secure Corporation
Pl 24
FIN-00181 Helsinki
Tel +358 9 2520 5513
Fax +358 9 2520 5014
Mobile: +358 400 648 180
E-mail: Mikko.Hypponen@xxxxxxxxxxxx
http://www.F-Secure.com
Mailing list policy
You have previously expressed interest in our products, or have asked
to be included on one of our press release lists by personally giving us
your e-mail address for this purpose. Our mailing list are for the
exclusive use and the expressed purpose of F-Secure and are not
sold or given to third parties.
If you no longer wish to receive our press releases, or your email address
has been added to our lists without your consent, you can unsubscribe at
http://www.F-Secure.com/news/subscribe.html
If you only wish to receive our press releases concerning viruses,
please go to
http://www.F-Secure.com/news/subscribe.html
and first unsubscribe from
press-english-interest@xxxxxxxxxxxxxxxxxx
and then subscribe to
press-english-virus-announcement@xxxxxxxxxxxxxxxxxx
_________________________________________________
Marita Nasman-Repo tel: +358 9 2520 5613
Deputy Communicator fax : +358 9 2520 5018
mobile: +358 40 517 4613
F-Secure Corporation http://www.F-Secure.com
|