SirCam Worm Not Scared By Anti-Virus Products.

The current assault by the new SirCaM email virus is a fresh reminder that organizations can only be safe against email attacks such as this if they have installed an email content checking gateway at email server level. Because the SirCam worm can disguise itself by morphing and adopting different Subject lines each time it spreads, anti-virus protection alone is not enough, warned GFI, developer of Mail essentials for Exchange/SMTP, the email content checking and anti-virus solution. This virulent new email worm is spreading fast, disseminating by emailing copies of itself to all contacts in the email address books of infected users. Besides, it sends a random file from the infected user's PC as an attachment, meaning that this alarming virus could possibly send out confidential corporate information in the process. The subject line of the email takes the name of the file sent out when the SirCam worm replicates itself, making it much harder for recipients to identify as a virus. The virus is activated when the recipient double-clicks on its attachment, which masks an executable file such as a bat, com, Ink and/or pif file. It then launches a damaging attack on the recipient's PC, able to destroy files and directories and occupy hard disk space, as well as mass mailing itself.

www.gfi.com