RE: [bolger] RE: Ken's msg, SIRCAM worm and Outlook settings

Paul:

The Sircam is a nasty little bug. Interestingly, It does not seem to affect
my win2000 machine. It is a great operating system - almost never locks up.

If you want to read some good boat building stuff, and don't mind reading
off the screen, try Jim Michalak's old newsletters:

http://marina.fortunecity.com/breakwater/274/

Chuck


> My network administrator warned me that with my version of
> Outlook (the full
> version, not Outlook express; and not Netscape products), there is a
> 'feature' that previews attached files automatically even if you do not
> click on the attachment, and that this may be enough to allow the SIRCAM
> 'worm' to do its thing. So if you run full-scale Outlook, you
> might want to
> get an antivirus update and then do a full scan, this sounds like a
> particularly nasty bug to get rid of once it infiltrates a
> system. I didn't
> get any attachments with Ken's message, and my Norton Antivirus didn't
> quarantine his message as it has numerous other incoming copies of SIRCAM,
> but I doubt Ken composed that particular message text himself...... bad
> sign, for him anyway.
>
> Maybe I'm just being paranoid.... I thought it'd be nice to read a novel
> this summer, take a break from boatbuilding books. My brother recommended
> Stephen King's 'The Stand', it's about a germ warfare research accident
> causing an apocalyptic flu epidemic... 150 pages into it I'm thinking I'd
> rather be reading BWAOM for the 17th time....
> Wish PCB&F would come out with a new book! Sounds like they've got enough
> new designs to fill one.
>
> Paul L.
>
>
I got the same message (with no attachment) today at work while
checking out the website. I got the same message last week unrelated
to this site, with an attachment, which I unwittingly hit on without
thinking. My Outlook Express popped up with a message that said in
essence "you might not really want to open this, it could be infected
with a virus" (some programs look out for idiots). So I deleted it
without opening it. I understand that deleting the message and the
attachment does the trick. No further problem. Just don't open the
attachment.
So who wants to know why I'm looking at this website on my computer
at work?

Don


> My network administrator warned me that with my version of Outlook
(the full
> version, not Outlook express; and not Netscape products), there is a
> 'feature' that previews attached files automatically even if you do
not
> click on the attachment, and that this may be enough to allow the
SIRCAM
> 'worm' to do its thing. So if you run full-scale Outlook, you might
want to
> get an antivirus update and then do a full scan,
[bolger] WARNING!!! SKIMMER Message from Ken Abrahams
> > WARNING!!!
My network administrator warned me that with my version of Outlook (the full
version, not Outlook express; and not Netscape products), there is a
'feature' that previews attached files automatically even if you do not
click on the attachment, and that this may be enough to allow the SIRCAM
'worm' to do its thing. So if you run full-scale Outlook, you might want to
get an antivirus update and then do a full scan, this sounds like a
particularly nasty bug to get rid of once it infiltrates a system. I didn't
get any attachments with Ken's message, and my Norton Antivirus didn't
quarantine his message as it has numerous other incoming copies of SIRCAM,
but I doubt Ken composed that particular message text himself...... bad
sign, for him anyway.

Maybe I'm just being paranoid.... I thought it'd be nice to read a novel
this summer, take a break from boatbuilding books. My brother recommended
Stephen King's 'The Stand', it's about a germ warfare research accident
causing an apocalyptic flu epidemic... 150 pages into it I'm thinking I'd
rather be reading BWAOM for the 17th time....
Wish PCB&F would come out with a new book! Sounds like they've got enough
new designs to fill one.

Paul L.

> Subject: [bolger] WARNING!!! SKIMMER Message from Ken Abrahams
> WARNING!!!
See Below. Watch out for these type of messages. The are caused by a
worm/virus that gets into a system and then sends itself to other machines
by using the e-mail address book of the machine it is on and making up a
subject by randomly picking a text string from a file on the hard drive.
The person that is the source of the message is not even aware that the
messages are being sent and sence the person is already on you address list
the message will be delievered. Just be careful and make sure that you open
e-mail only after a virous check or after confirming that it was intentially
sent.

Michael Surface


>From: Hal Lynch <hal@...>
>Reply-To:bolger@yahoogroups.com
>To:bolger@yahoogroups.com
>Subject: Re: [bolger] WARNING!!! SKIMMER Message from Ken Abrahams
>WARNING!!!
>Date: Thu, 09 Aug 2001 10:52:26 -0600
>
> > I received a message with an attachment this morning
> >entitled "SKIMMER". The sender was listed as "Ken Abrahams". The
> >message itself said that he was looking for advice. I scanned the
> >attachment with Norton Anti- Virus first and was warned that it
> >was "infected" with a worm that couldn't be repaired or removed. I
> >therefore deleted it.
> > I don't know if I'm the only one who has received this message or
> >if it was inadvertantly or maliciously sent, but I thought I should
> >warn the group regarding this message.
>
>I received the same message and attachment. I looked at it with
>an editor (bbedit) and didn't like what I saw so I deleted it.
>
>hal


_________________________________________________________________
Get your FREE download of MSN Explorer athttp://explorer.msn.com/intl.asp
Hi Everyone,

I'm new to the group. It seems that my first contribution to the
group will not be boat or Bolger related.

We've been having trouble with the Sircam virus since last Thursday.
It has infected quite a few machines at work and spread elsewhere.
This sounds like the virus you are facing.

My best adivce, outside of always running anti virus software and
keeping it up to date is to not open unexpected attachments without
scanning. Even if it is from a trusted source.

There is quit a bit of information about Sircam at:

http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@...

and

http://www.mcafee.com/anti-virus/viruses/sircam/default.asp?cid=2360

In short this one of the worms that uses Outlook or Outlook Express
address books to spread, it sends attached files from the infected
machine, often with a request for advice from the recipient.

It is farily easy to detect and remove. And usually relatively
harmless, but not always.

Hope this helps.


Now to introduce myself. I've built quite a few plywood boats, but
it was a long time ago. I think the last one was about 16 years
ago. I am thinking about building again. Just beginning to think
about it, I haven't made any decisions yet. I've always liked
Bolger's work, so when I found this group I signed up! I'm looking
forward it participating in the group.

Ray McQuin
raymcquin@...

--- In bolger@y..., Hal Lynch <hal@c...> wrote:
> > I received a message with an attachment this morning
> >entitled "SKIMMER". The sender was listed as "Ken Abrahams". The
> >message itself said that he was looking for advice. I scanned the
> >attachment with Norton Anti- Virus first and was warned that it
> >was "infected" with a worm that couldn't be repaired or removed. I
> >therefore deleted it.
> > I don't know if I'm the only one who has received this message
or
> >if it was inadvertantly or maliciously sent, but I thought I should
> >warn the group regarding this message.
>
> I received the same message and attachment. I looked at it with
> an editor (bbedit) and didn't like what I saw so I deleted it.
>
> hal
We received two of these messages both from "Ken Abrams" One with "Skimmer"
in the subject line and one with "Ledger" in the subject line. I deleted
both thanks to your warnings. Chris
> I received a message with an attachment this morning
>entitled "SKIMMER". The sender was listed as "Ken Abrahams". The
>message itself said that he was looking for advice. I scanned the
>attachment with Norton Anti- Virus first and was warned that it
>was "infected" with a worm that couldn't be repaired or removed. I
>therefore deleted it.
> I don't know if I'm the only one who has received this message or
>if it was inadvertantly or maliciously sent, but I thought I should
>warn the group regarding this message.

I received the same message and attachment. I looked at it with
an editor (bbedit) and didn't like what I saw so I deleted it.

hal
He'll need to clean his PC before it will go away. As long as we don't try
and open the attachments, if included, I think we'll be okay.

Jeff

----- Original Message -----
From: <bgbeck55@...>
To: <bolger@yahoogroups.com>
Sent: Thursday, August 09, 2001 10:26 AM
Subject: [bolger] WARNING!!! SKIMMER Message from Ken Abrahams WARNING!!!


> I received a message with an attachment this morning
> entitled "SKIMMER". The sender was listed as "Ken Abrahams". The
> message itself said that he was looking for advice. I scanned the
> attachment with Norton Anti- Virus first and was warned that it
> was "infected" with a worm that couldn't be repaired or removed. I
> therefore deleted it.
> I don't know if I'm the only one who has received this message or
> if it was inadvertantly or maliciously sent, but I thought I should
> warn the group regarding this message.
>
>
>
> Bolger rules!!!
> - no cursing, flaming, trolling, spamming, or flogging dead horses
> - pls take "personals" off-list, stay on topic, and punctuate
> - add your comments at the TOP and SIGN your posts, snip all you like
> - To order plans: Mr. Philip C. Bolger, P.O. Box 1209, Gloucester, MA,
01930, Fax: (978) 282-1349
> - Unsubscribe:bolger-unsubscribe@yahoogroups.com
>
> Your use of Yahoo! Groups is subject tohttp://docs.yahoo.com/info/terms/
>
>
I received a message with an attachment this morning
entitled "SKIMMER". The sender was listed as "Ken Abrahams". The
message itself said that he was looking for advice. I scanned the
attachment with Norton Anti- Virus first and was warned that it
was "infected" with a worm that couldn't be repaired or removed. I
therefore deleted it.
I don't know if I'm the only one who has received this message or
if it was inadvertantly or maliciously sent, but I thought I should
warn the group regarding this message.