Re: Tomorrow's headline

[Sanjeev Gupta <ghane@xxxxxxxxxxxxxxxxx>]

On Wed, 25 Jul 2001, Pankaj Kaushal wrote:

> >From the Tomorrow's News today department 

Yestarday's actually.

> As usual attacks Outlook express.

Unusually, does not attack OE users only.

The virus is SIRCAM or SIRC, and works by using an internal SMTP engine
(so no record in the Sent Items).  It uses OE for two things:
	looking up your SMTP server
	Picking up your WAB

However, in case you have no OE on you machines, all is not lost.  It also
scans .htm (and other files), and picks up mailto: tags.  And, at no extra
cost, it has a set of SMTP servers, as well as the one used in the last
hop, to try.  Really.

All in all, amazing.

--
Sanjeev "ghane" Gupta                    Mob: +65 98551208
dotXtra Pte Ltd                          Fax: +65 5470260
Singapore                                email: ghane@xxxxxxxxxxx
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~