What is W32.Sircam.Worm?

A. W32.Sircam.Worm is a new virus that is spreading very fast, judging by the fact that I received 30 infected email messages in 1 day. This new worm is disguised as a .bat, .com, .lnk, or .pif attachment to an email message with a random subject line. Do not open these attachments!

The body of the message is random, but the English version always has the following:

First line: Hi! How are you?
Last line: See you later. Thanks

To determine whether the virus has infected your system, perform the following steps:

  1. Start the registry editor (regedit.exe).
  2. Move to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices.
  3. Look for Driver32=%System%\scam32.exe. If you find this entry, the virus has infected your computer.

For more information, visit the Symantec Web site; you'll also find a free download that can search your machine for W32.Sircam.Worm and remove the virus.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.