— W32/SirCam@mm (Sir Cam Virus)—
Dear Chris:
McAfee.com has seen a large and growing number of consumer computers infected with W32/SirCam@MM. This is a HIGH RISK VIRUS FOR CONSUMERS. The infected email can come from addresses that you recognize. Attached is a file with two different extensions. The file name itself varies.
The email message can appear as follows:
Subject: [filename (random)]
Body: [content varies]
---ENGLISH VERSION---
Hi! How are you?
I send you this file in order to have your advice
or I hope you can help me with this file that I send
or I hope you like the file that I sendo you
or This is the file with the information that you ask for
See you later. Thanks
---SPANISH VERSION---
Hola como estas ?
Te mando este archivo para que me des tu punto
de vista
or Espero me puedas ayudar con el archivo
que te mando
or Espero te guste este archivo que te mando
or Este es el archivo con la información que
me pediste
Nos vemos pronto, gracias.
The virus searches for .GIF, .JPG, .JPEG, .MPEG, .MOV, .MPG, .PDF, .PNG, .PS, and .ZIP files in the MY DOCUMENTS folder and attempts to send copies of these documents to email recipients found in the Windows Address Book and addresses found in cached files.
Click Here for detection and removal instructions.
McAfee.com VirusScan Online and Clinic subscribers:
If you don't have ActiveShield installed and updated, you are not protected from this virus. Click here to download ActiveShield.
Retail VirusScan Users: Version 4.0.70 and above with DAT file 4148 will detect and remove this virus.
Click Here to download the latest DAT files.