WARNING !!!

I just got a mail entitled: "latgrk" from recipient "marsumo".

containing the text:

Hola como estas ?

Te mando este archivo para que me des tu punto de vista

Nos vemos pronto, gracias.


If you get this, or anything asking your advice on a file attached DELETE THE MAIL. DONT TOUCH THE ATTACHMENT.

IT IS A VIRUS. UPDATE YOUR VIRUS SOFTWARE TO THE LATEST LEVEL AND RUN A FULL VIRUS SCAN. THE VIRUS IS DESTRUCTIVE AND VERY NASTY.

check the following links for details...

 

the mail address of the sender is MARSUMO@terra.es

from a whois on terra.es i got this:

Registrant:
Terra Network, S.A. (TERRA37-DOM)
Avda. Dos Castillas, 33 Edif. Atica 1
Pozuelo de Alarcon, Madrid E-28223
ES

Domain Name: TERRA.COM

I have mailed them to ask why i have received a virus infected mail (dnsadmin@CORP.TERRA.COM; dominios@CORP.TERRA.COM) and also cc'ed this to McAfee and Trend so they can look at it.

Dave

 

 

For those of you without an up-to-date virus checker you can use Trend's House Call (the PC-Cillin people), which is a web based checker. The service is free and it works -

 

The english version of this virus comes in an e-mail with the first line of text:

Hi, how are you?

 

I got 8 of these in one day!!!
All slightly different. Some said hello how are you...another said I've sent this for your attention.

Just deleted them!

 

Sircam is something of a prolific virus ATM. The people sending it out probably don't know they have been infected.

AFAIK though, it is not destructive but tries to e-mail copies of various files types to all the people in your address book.

ChrisB.