Virus-name?

[kallikru]

Can someone put a name-tag on a virus that comes as a file attachment with double extension (fx. xxxxxxx.doc.vxs) in a mail with the approx. text "Hi. How are you? I send you this attachment in order for you to give me advice. Thank you. See you later."

Not that this has hurt me, but I received this twice yesterday from a danish company (never heard of them before and they wouldn't tell me where they got my address from) that suffered an attack by this virus.

The virus obviously spreads by sending itself to persons found in the local address book, but seems to require that the attachment is renamed to .exe and run.

I had a look at the file in notepad on an off-line machine, which told me it was an exe-file, but so far nothing has happened - newest version of InnoculateIT doesn't register anything .
I'd like to know what this is and what to look for - any ideas?

Karl.

------------------
Karl, Denmark
---------
"..and may The Force be with you too..."

[maxximilian]

This one maybe? Sircam...
http://www.symantec.com/avcenter/[email protected]

This worm arrives as an email message with the following content:

Subject: The subject of the email will be random, and will be the same as the file name of the email attachment.
Attachment: The attachment is a file taken from the sender's computer and will have the extension .bat, .com, .lnk or .pif added to it.
Message: The message body will be semi-random, but will always contain one of the following two lines (either English or Spanish) as the first and last sentences of the message.

Spanish Version:
First line: Hola como estas ?
Last line: Nos vemos pronto, gracias.

English Version:
First line: Hi! How are you?
Last line: See you later. Thanks

Between these two sentences, some of the following text may appear:

Spanish Version:
Te mando este archivo para que me des tu punto de vista
Espero me puedas ayudar con el archivo que te mando
Espero te guste este archivo que te mando
Este es el archivo con la informaci=n que me pediste

English Version:
I send you this file in order to have your advice
I hope you can help me with this file that I send
I hope you like the file that I sendo you
This is the file with the information that you ask for


------------------
Be not afraid of greatness. Some are born great, some achieve greatness, and some have greatness thrust upon 'em.

MAXXIMILIAN'S

[This message has been edited by maxximilian (edited 07-27-2001).]

[kallikru]

Maxx,

That looks like a: Bingo.

Since nothing of the described is found in neither Recycled, system or temp folders, and no trace whatsoever is found in the registry on my offline machine, it would seem I can safely put it back online. The critter is isolated on a diskette.

------------------
Karl, Denmark
---------
"..and may The Force be with you too..."

[Nick Grana]

Max is right on: More news on this...
http://news.cnet.com/news/0-1003-200...e.dtx.nl-sty.0 Good luck.

------------------
"Give a man a fish and you feed him for a day; teach him to
use the Net and he won't bother you for weeks."