A. W32.Sircam.Worm is a new virus that is spreading very fast, judging by the fact that I received 30 infected email messages in 1 day. This new worm is disguised as a .bat, .com, .lnk, or .pif attachment to an email message with a random subject line. Do not open these attachments!
The body of the message is random, but the English version always has the following:
First line: Hi! How are you?
Last line: See you later. Thanks
To determine whether the virus has infected your system, perform the following steps:
- Start the registry editor (regedit.exe).
- Move to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices.
- Look for Driver32=%System%\scam32.exe. If you find this entry, the virus has infected your computer.
For more information, visit the Symantec Web site; you'll also find a free download that can search your machine for W32.Sircam.Worm and remove the virus.