[ On Wednesday, July 25, 2001 at 18:28:03 (+0200), Phil Pennock wrote: ]
> Subject: Re: [Exim] W32/Sircam worm
>
> On 2001-07-25 at 17:03 +0100, Dr Andrew C Aitchison wrote:
> > I've caught the Spanish version: the match in that case would be
> > '^Te mando este archivo para que me des tu punto de vista$'
>
> Uhm, this is one text, of multiple options, chosen at random.
>
> <http://www.sophos.com/virusinfo/analyses/w32sircama.html>
That's what they say, but in reality I've never ever seen or heard of
anything found in the wild with other than the English version I quoted,
or the Spanish version above, and let me tell you I've personally seen
thousands and thousands upon thousands of copies of this virus in the
wild! ;-)
Perhaps the code that's supposed to choose the random text is broken?
If someone can show me/us a copy of an in-the-wild message (without the
base64 part, thanks very much! ;-), I'd very much appreciate it.
--
Greg A. Woods
+1 416 218-0098 VE3TCP <gwoods@???> <woods@???>
Planix, Inc. <woods@???>; Secrets of the Weird <woods@???>
