Sircam | was: Re: CodeRed - Medienecho?

[Joerg-Olaf Schaefers <js@fx3.de>]

Hallo Gunnar,

Wednesday, August 01, 2001, 9:52:54 PM, you wrote:

> On Wed, 1 Aug 2001 20:50:48 +0200, Simone Demmel wrote:

>> aber wie sehen die denn aus?

> SirCam enthält im Body entweder den Text

> ================================ BEGIN =================================
> Hi! How are you?
 
> I send you this file in order to have your advice
 
> See you later. Thanks
> ...

Die mittlere Zeile kann unterschiedliche sein. Siehe Links in meiner
anderen Mail.

--snip--
...

This  worm arrives as an email message with the following content:

Subject: The subject of the email will be random, and will be the same
as the file name of the email attachment.

Attachment: The attachment is a file taken from the sender's computer
and will have the extension .bat, .com, .lnk or .pif added to it.

Message: The message body will be semi-random, but will always contain
one of the following two lines (either English or Spanish) as the
first and last sentences of the message.

Spanish Version:
First line: Hola como estas ?
Last line: Nos vemos pronto, gracias.

English Version:
First line: Hi! How are you?
Last line: See you later. Thanks
Between these two sentences, some of the following text may appear:

Spanish Version:
Te mando este archivo para que me des tu punto de vista
Espero me puedas ayudar con el archivo que te mando
Espero te guste este archivo que te mando
Este es el archivo con la informaci=n que me pediste

English Version:
I send you this file in order to have your advice
I hope you can help me with this file that I send
I hope you like the file that I sendo you
This is the file with the information that you ask for

...
--snip--

Quelle: http://www.symantec.com/avcenter/venc/data/pf/w32.sircam.worm@mm.html


MfG
 Olaf, ./fx3

-- 
Best regards,                             get my pgp-key at: 
 Joerg-Olaf                               www.fx3.de/js.asc