[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Virus Alert from F-Secure. This one looks ugly.



PureBytes Links

Trading Reference Links

This press release comes from F-Secure. For more
information on F-Secure's mailing list policy,
see end of message.

Press release

For immediate release

F-Secure warns of Sircam worm

Helsinki-Finland, July 24, 2001 - F-Secure Corporation (HEX:FSC) is 
alerting computer users worldwide about a new, rapidly spreading e-mail 
worm called Sircam. Sircam is a mass mailing e-mail worm with the ability 
to spread through Windows Network shares. F-Secure anti-virus detects and 
disinfects the worm.

The worm was found in the wild on July 17 in the USA. After that the worm 
has been spreading globally. In addition of USA, infections have been 
reported in Asia, South America, India and Europe. Northern Europe and 
Scandinavia have been spared the worst hits because of the holiday season 
in these countries.

When a Sircam-infected e-mail attachment is opened it shows the document it 
picked up from the sender's machine. The file is displayed with the 
appropiate program according to its extension (.DOC, .XLS, .ZIP). This 
effectively disguises the worm's activity. While the user is checking the 
document, the system gets infected.

The worm collects e-mail addresses from the user's Windows Address Book and 
then sends itself out with one of the document files it found in the user's 
'My Documents' folder. The message the system sends may be either in 
English or in Spanish.

"This is the first e-mail worm that is not Windows Outlook-specific," says 
Mikko Hypponen, Manager of Anti-Virus Research at F-Secure. "Instead, this 
worm makes use of any e-mail system. This makes it much more liable to 
spread."

The worm has two payloads. On October 16 it may delete everything from the 
drive where Windows is installed. Or, on any other day it may fill up the 
drive where Windows resides. It may also use Windows network shares to spread.

The technical description and screenshots of the Sircam worm are available 
online at:
http://www.f-secure.com/v-descs/sircam.shtml

About F-Secure Corporation

F-Secure Corporation is a leading provider of centrally managed security 
for today's mobile, wireless enterprise. The company offers a full range of 
award-winning, integrated anti-virus, file encryption, distributed firewall 
and VPN solutions for workstations, servers, gateways and mobile devices. 
F-Secure products are uniquely suited for delivery of Security as a 
Serviceā„¢ which provides invisible, reliable, always-on, and up-to-date 
security for the most widely distributed user base. Whether provided by 
corporate IT or delivered by service providers, F-Secure solutions extend 
policy-based security and instant alerts to all devices where information 
is created, stored or accessed. Founded in 1988, F-Secure Corporation is 
listed on the Helsinki Stock Exchange [HEX: FSC]. The company is 
headquartered in Helsinki, Finland with North American headquarters in San 
Jose, California, as well as offices worldwide.

For more information, please contact:

Mikko Hypponen, Manager, Anti-Virus Research
F-Secure Corporation
Pl 24
FIN-00181 Helsinki
Tel +358 9 2520 5513
Fax +358 9 2520 5014
Mobile: +358 400 648 180
E-mail: Mikko.Hypponen@xxxxxxxxxxxx
http://www.F-Secure.com

Mailing list policy

You have previously expressed interest in our products, or have asked
to be included on one of our press release lists by personally giving us
your e-mail address for this purpose. Our mailing list are for the
exclusive use and the expressed purpose of F-Secure and are not
sold or given to third parties.

If you no longer wish to receive our press releases, or your email address
has been added to our lists without your consent, you can unsubscribe at
http://www.F-Secure.com/news/subscribe.html

If you only wish to receive our press releases concerning viruses,
please go to
http://www.F-Secure.com/news/subscribe.html
and first unsubscribe from
press-english-interest@xxxxxxxxxxxxxxxxxx
and then subscribe to
press-english-virus-announcement@xxxxxxxxxxxxxxxxxx


_________________________________________________

  Marita Nasman-Repo     tel:    +358 9 2520 5613
  Deputy Communicator    fax :   +358 9 2520 5018
                         mobile: +358 40 517 4613

  F-Secure Corporation   http://www.F-Secure.com