[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Fw: Virus Alert from F-Secure. This one looks ugly.



PureBytes Links

Trading Reference Links


----- Original Message -----
From: <Peter2150@xxxxxxx>
To: <Peter2150@xxxxxxx>
Sent: Tuesday, July 24, 2001 11:12 AM
Subject: Virus Alert from F-Secure. This one looks ugly.


This press release comes from F-Secure. For more
information on F-Secure's mailing list policy,
see end of message.

Press release

For immediate release

F-Secure warns of Sircam worm

Helsinki-Finland, July 24, 2001 - F-Secure Corporation (HEX:FSC) is
alerting computer users worldwide about a new, rapidly spreading
e-mail
worm called Sircam. Sircam is a mass mailing e-mail worm with the
ability
to spread through Windows Network shares. F-Secure anti-virus detects
and
disinfects the worm.

The worm was found in the wild on July 17 in the USA. After that the
worm
has been spreading globally. In addition of USA, infections have been
reported in Asia, South America, India and Europe. Northern Europe and
Scandinavia have been spared the worst hits because of the holiday
season
in these countries.

When a Sircam-infected e-mail attachment is opened it shows the
document it
picked up from the sender's machine. The file is displayed with the
appropiate program according to its extension (.DOC, .XLS, .ZIP). This
effectively disguises the worm's activity. While the user is checking
the
document, the system gets infected.

The worm collects e-mail addresses from the user's Windows Address
Book and
then sends itself out with one of the document files it found in the
user's
'My Documents' folder. The message the system sends may be either in
English or in Spanish.

"This is the first e-mail worm that is not Windows Outlook-specific,"
says
Mikko Hypponen, Manager of Anti-Virus Research at F-Secure. "Instead,
this
worm makes use of any e-mail system. This makes it much more liable to
spread."

The worm has two payloads. On October 16 it may delete everything from
the
drive where Windows is installed. Or, on any other day it may fill up
the
drive where Windows resides. It may also use Windows network shares to
spread.

The technical description and screenshots of the Sircam worm are
available
online at:
http://www.f-secure.com/v-descs/sircam.shtml

About F-Secure Corporation

F-Secure Corporation is a leading provider of centrally managed
security
for today's mobile, wireless enterprise. The company offers a full
range of
award-winning, integrated anti-virus, file encryption, distributed
firewall
and VPN solutions for workstations, servers, gateways and mobile
devices.
F-Secure products are uniquely suited for delivery of Security as a
Serviceā„¢ which provides invisible, reliable, always-on, and up-to-date
security for the most widely distributed user base. Whether provided
by
corporate IT or delivered by service providers, F-Secure solutions
extend
policy-based security and instant alerts to all devices where
information
is created, stored or accessed. Founded in 1988, F-Secure Corporation
is
listed on the Helsinki Stock Exchange [HEX: FSC]. The company is
headquartered in Helsinki, Finland with North American headquarters in
San
Jose, California, as well as offices worldwide.

For more information, please contact:

Mikko Hypponen, Manager, Anti-Virus Research
F-Secure Corporation
Pl 24
FIN-00181 Helsinki
Tel +358 9 2520 5513
Fax +358 9 2520 5014
Mobile: +358 400 648 180
E-mail: Mikko.Hypponen@xxxxxxxxxxxx
http://www.F-Secure.com

Mailing list policy

You have previously expressed interest in our products, or have asked
to be included on one of our press release lists by personally giving
us
your e-mail address for this purpose. Our mailing list are for the
exclusive use and the expressed purpose of F-Secure and are not
sold or given to third parties.

If you no longer wish to receive our press releases, or your email
address
has been added to our lists without your consent, you can unsubscribe
at
http://www.F-Secure.com/news/subscribe.html

If you only wish to receive our press releases concerning viruses,
please go to
http://www.F-Secure.com/news/subscribe.html
and first unsubscribe from
press-english-interest@xxxxxxxxxxxxxxxxxx
and then subscribe to
press-english-virus-announcement@xxxxxxxxxxxxxxxxxx


_________________________________________________

  Marita Nasman-Repo     tel:    +358 9 2520 5613
  Deputy Communicator    fax :   +358 9 2520 5018
                         mobile: +358 40 517 4613

  F-Secure Corporation   http://www.F-Secure.com