Linda W. Skelton St. George, Dorchester Co., SC [email protected] Sent: Sunday, July 29, 2001 6:35 PM > Since I am not the kind of person who sends out inane virus warnings, you > should know that this one is legitimate. > > Friday, my office was attacked by a computer virus known as the SirCam > worm. It's a very nasty one that took 7 hours to remove from our office > systems. The SirCam worm is just like the Melissa virus and automatically > emails itself out to people in your address book. > > Symantec, the makes of Norton AntiVirus, have posted information on how to > remove the SirCam worm at the following address: > http://www.sarc.com/avcenter/venc/data/[email protected] > > Below is a description of what the email will be like. If you get such an > email, delete it immediately! > > Subject: The subject of the email will be random, and will be the same as > the file name of the email attachment. > Attachment: The attachment is a file taken from the sender's computer and > will have the extension .bat, .com, .lnk or .pif added to it. > Message: The message body will be semi-random, but will always contain one > of the following two lines (either English or Spanish) as the first and > last sentences of the message. > > Spanish Version: > First line: Hola como estas ? > Last line: Nos vemos pronto, gracias. > > English Version: > First line: Hi! How are you? > Last line: See you later. Thanks > > Between these two sentences, some of the following text may appear: > > Spanish Version: > Te mando este archivo para que me des tu punto de vista > Espero me puedas ayudar con el archivo que te mando > Espero te guste este archivo que te mando > Este es el archivo con la informaci=n que me pediste > > English Version: > I send you this file in order to have your advice > I hope you can help me with this file that I send > I hope you like the file that I send you > This is the file with the information that you ask for >