[GBlist] More Virus Protection! -- Re: [GBlist] Urgent Information Needed

["Mike Rogers" <rogers.mike@verizon.net>]

CAUTION, IF YOU GET A FILE LIKE THE ONE DESCRIBED BELOW, YOU PROBABLY WANT
TO DELETE IT.  If you already opened it, you may want to visit the site
below to find out if you're infected and what to do about it.

At least several people on the list received emails from George DAngelo,
gjdmd@adelphia.net, that fit the profile of the Sircam Worm that was much in
the news last month.  This may mean that George is infected, and we're just
in George's address book.

The body of the message typically looks like:

     Hi! How are you?

     I send you this file in order to have your advice

     See you later. Thanks

The attachment/enclosure name is variable, often with '.doc', '.bat' and
'.zip' as part of the filename extension. At the end is often .lnk, .zlo
or .zlg. Some names we have seen are 'singapore.doc', resume.doc.bat,
recletter.bat, vnc-3.3.3r9_x86_win32FTP.zip.zlo,
tony-method.doc.lnk. Often the subject and attachment filename are related
or the same.

This is NOT a hoax.  For more info see:
http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html

Good luck!
Mike


> > ----- Original Message -----
> > From: Ted Shelton <ted655@hotmail.com>
> > To: <greenbuilding@crest.org>
> > Sent: Friday, August 31, 2001 9:51 AM
> > Subject: [GBlist] Urgent Information Needed
> >
> >
> > > Is or has this person ever been on this list?
> > >          :
> > > "George DAngelo"<gjdmd@adelphia.net>
> > >
> > >
> > > ted655@hotmail.com



______________________________________________________________________
This greenbuilding dialogue is sponsored by REPP/CREST, creator of
Solstice http://www.crest.org, and BuildingGreen, Inc., publisher of
Environmental Building News and GreenSpec http://www.BuildingGreen.com
______________________________________________________________________