Colleagues:

I just received an e-mail with the Sircam virus attached to it (I recognized
it from news broadcasts and deleted it, so my computer did not get
infected). Sircam is a mass mailing virus that uses Microsoft Outlook
Express to distribute itself. It attempts to evade detection by arriving
with a random subject line and an attachment by the same name. But Sircam is
particularly nasty since it can send out personal documents saved on the
hard drive.

Sircam's message says, "I send you this file in order to have your advice.
See you later! Thanks"

If you open the attachment, the virus is released. Once a computer is
infected, Sircam creates a list of files with extensions such as .DOC and
.JPG that are located in the user's "My Documents" folder. The virus then
sends copies of itself to users in the victim's address book, including one
of those files chosen at random. If you run the file that is attached to the
message, it also copies itself to the Recycling Bin, sets up a directory
called 'c:\recycled\SirC32.exe' and appears as 'SCam32.exe' in the Windows
system directory. This way the worm's activity is disguised.

I know we all receive warnings and know not to open files from people you
don't know, but I just thought I would let you know about this in case you
were unaware of the latest virus making the rounds.

Thank you.

David Aborn
Dept. of Biological and Environmental Sciences
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.231 / Virus Database: 112 - Release Date: 2/12/01