I was "bit" yesterday in a similar fashion. Was expecting a file
and did not suspect this at all. This virus is very new and
takes some work to recover from ... (took me a few hours to
research it and go through the processes!)
Search for SCAM32.exe or sirc32.exe ... it creates among
other things SCD.DLL and SC0.DLL files from your address
book and temporary Internet files ... a REAL pain in the ... as
it mess with the Windows registry and tries to STOP you from fixing
the problem. You'll know you have been "bit" when you try to
run programs and the dreaded "can't find SIRC32.exe" pops up!
Here's what I used to clean my system up ...
http://antivirus.about.com/library/weekly/aa071801a.htm?iam=dpile&terms=%2Bs
cam32.exe
73 Billy AA4NU
----- Original Message -----
From: "Mobile Workshop" <mobile.workshop@guernseytelecoms.com>
To: <rtty@contesting.com>
Sent: Friday, July 20, 2001 9:20 AM
Subject: [RTTY] Virus doing the rounds
> Hi Guys,
>
> Just to let you all know that a friend here at work has just been daft
> enough to open an attachment that turned out to be a virus!
> It seems it is doing the rounds at the moment, as we know of a few that
have
> received it in the last two days.
>
> It is an attachment with the suffix of .PIF, but unfortunately, he
> thought it was a TIF (a picture), and as he was expecting one, he opened
it!
> Now he has the task of trying to eradicate it from his system, but that is
> now proving to be a bit more of a chore than the help files he has found
> would suggest.
> Several of the files it generates won't allow themselves to be deleted! He
> is sending the info to Norton for a bit more help with this one. However,
it
> may be due to the fact that he is running Win2000, rather than the usual
> 95/98.
>
> So.............. please be wary of such things, and don't open attachments
> with .pif as a suffix!
>
> 73 and I hope to work a few of you in NAQP
> Phil GU0SUP
|