On Thu, 17 Jan 2002, Ken Follett wrote:

> This is a new one... shithead virus attacks in e-mail to HISTORIC
> PRESERVATION interests. I think we are getting somewhere w/ BP. I feel so
> mainstream! Or, this is a particularly dumb person wanting an estimate on
> patinating their skunky brick wall. I dare not look.
>
> ][<en
>
> =====================================
> Subj:   miscellaneous articles
> Date:   1/17/2002 10:09:24 AM Pacific Standard Time
> From:    [log in to unmask] (Historic Properties)
> To:    [log in to unmask]
>
> File:   miscellaneousarticles.doc.bat (160256 bytes) DL Time (21600 bps): < 2
> minutes
>
> Hi! How are you?
>
> I send you this file in order to have your advice
>
> See you later. Thanks
>
> =====================================

It's natural to think that some malicious acquaintance deliberately mailed
you a virus, but this is almost never the case.  Rather, the virus emailed
itself out without any encouragement from the user.

That email looks like it was generated by the SirCam virus, which is very
widespread these days.  See:

[log in to unmask]" target="_blank">http:[log in to unmask]

When SirCam infects a computer system, it generously shares the user's
personal documents with as many correspondents as it can find email
addresses for.  An unwary recipient who opens and reads the often
intriguingly-titled document will infect his or her own system.
(However, virus-savvy-and-nosy recipients can -- and do -- read the
contents without getting infected.)

One of the places SirCam (and some other recent viruses, such as BadTrans)
looks for email addresses is the victim's browser cache.  In other words,
if someone browses a web site which contains YOUR email address, and their
computer is or becomes infected by SirCam, you will soon start receiving a
lot of their files.

Because I have a popular web site, I have received hundreds of virus
emails.  Just since January 1, a relatively quiet time, I have gotten
68 virus emails, representing at least four different viruses.

                              Larry

---
Lawrence Kestenbaum, [log in to unmask]
Washtenaw County Commissioner, 4th District
The Political Graveyard, http://politicalgraveyard.com
Ebay Page, http://members.ebay.com/aboutme/potifos/
Mailing address: P.O. Box 2563, Ann Arbor MI 48106