I received this notice from a friend. Hope this helps! I haven't verified this information. Linda Hull ----- Original Message ----- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ IMPORTANT VIRUS ALERT! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ I received this from McAfee several days ago and again from Vanguard Magazine... Phyllis During the last few days we have received dozens of e-mails with a virus attached. Every time I check my mail, there are several of these waiting to be opened. And many of these are from our members. I received this message from McAfee Virus Scan On-line and thought I would pass it along to the membership. McAfee has seen a large and growing number of consumer computers infected with W32/SirCam@MM. This is a HIGH RISK VIRUS. The infected e-mail originates from addresses that you recognize. The file name itself varies; however, the e-mail message is always the same. It appears with one of the following texts: Hi! How are you? I send you this file in order to have your advice OR I hope you can help me with this file that I send OR I hope you like the file that I sendo you OR This is the file with the information that you ask for See you later. Thanks --- the same message may be received in Spanish --- Hola como estas ? Te mando este archivo para que me des tu punto de vista OR Espero me puedas ayudar con el archivo que te mando OR Espero te guste este archivo que te mando OR Este es el archivo con la información que me pediste Nos vemos pronto, gracias. The virus searches for .GIF, .JPG, .JPEG, .MPEG, .MOV, .MPG, .PDF, .PNG, .PS, .AIV, and .ZIP files in the MY DOCUMENTS folder and attempts to send copies of these documents to e-mail recipients found in the Windows Address Book and addresses found in cached files. In virtually all cases, the worm infects the document it removed from "My Documents" and e-mails the file as an attachment with a double extension such as "file.doc.exe." If the recipient clicks on the file, SirCam infects their computer. The names of the attached files I received always contained two periods (..); for example, the attached file may be "PersonalFinances.doc.bat" or "FinalLetterToRoy.doc.exe". Hence, look at every attached file you receive -- it will be from someone who has your address -- and do not open it if you see two periods. (Note: I just received a report from someone who stated that they had received a nude movie as an attachment from a Christian that they knew. The SirCam Virus will embarass its victims if they have anything to hide.) IT GETS WORSE: Besides e-mailing a randomly selected document from the "My Documents" folder to every e-mail address stored on an infected computer's system folder, SirCam also plays an odd little game of chance with an infected computer. When activated, the virus randomly chooses whether to take over all the unused space on a hard drive by filling it with text, or it may DELETE THE CONTENTS The contents of the hard drive. My e-mail in-boxes, consisting of five different addresses, continue to fill up with an odd assortment of our readers' personal documents and images sent without their permission, compliments of the worm-virus dubbed "SirCam." In fact, I'm receiving several different documents from the same member because SirCam starts up every time you open an executable file, as AOL, Word, etc. THIS VIRUS IS SERIOUS. For detection and removal instructions for the Sir Cam Virus, or to add an umbrella of protection over your computer if you do not already have McAfee Virus Scan Online, point your browser to: http://click.linksynergy.com/fs-bin/click?id=e5EA/jVje2c& offerid=13772.10000076&type=4&subid=0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ PLEASE FORWARD THIS VIRUS ALERT! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~