Sircam

Windows XP/2000/NT/ME/98/95

Sircam is a worm that gets into computers in an e-mail message with the first line Hi! how are you ?

Sircam is highly contagious and spreads very rapidly:

• By automatically sending itself to all the contacts in the Address Book in infected computers.
• By infecting all the Windows NT workstations in a network. This makes this virus particularly dangerous for companies.

It main effects are: it steals personal data on the users it infects, uses up the free hard disk space and deletes the information it contains.

Sircam reaches computers in an e-mail message that is very easy to recognize, as it always has the following characteristics:

• Message: The first line is:
  
  Hi! how are you ?
  
  This line is followed by the text:
  
  I send you this file in order to have your advice
  
  I hope you can help me with this file that I send
  
  I hope you like the file that I sendo you
  
  This is the file with the information that you ask for
  
  And the last line is:
  
  See you later. Thanks.
• Attachments: The attachment has a variable name and a double extension (for example, PICTURE.VBS.JPG).

For more information consult the section Means of transmission.