Rangenet FAQRangenet FAQ C (11) / Q (155)

  GENERAL QUESTIONS 1.GENERAL QUESTIONS (19)
  GETTING STARTED 2.GETTING STARTED (6)
  TROUBLESHOOTING 3.TROUBLESHOOTING (16)
  MODEM CONNECT SETTINGS 4.MODEM CONNECT SETTINGS (2)
  EMAIL 5.EMAIL (37)
  VIRUSES 6.VIRUSES (7)
    How to avoid them 6.1.How to avoid them
    Virus Removal 6.2.Virus Removal
    Rangenet Helps with Attachments 6.3.Rangenet Helps with Attachments
    Re-Naming .ZZZ files in Outlook Express 6.4.Re-Naming .ZZZ files in Outlook Express
    What attachments are NOT filtered? 6.5.What attachments are NOT filtered?
    W32.Badtrans.B@mm Virus Information 6.6.W32.Badtrans.B@mm Virus Information
    W32.Sircam.Worm@mm Virus Information 6.7.W32.Sircam.Worm@mm Virus Information
  MANAGING WEBSITES 7.MANAGING WEBSITES (21)
  PROMOTING WEBSITES 8.PROMOTING WEBSITES (10)
  BILLING/ACCOUNT CHANGES 9.BILLING/ACCOUNT CHANGES (23)
  RANGENET SPAM FILTER 10.RANGENET SPAM FILTER (6)
  MISC. 11.MISC. (8)

W32.Sircam.Worm@mm Virus Information
Copyright Rangenet Support
Created the 2001-12-08 14:34:49 (Updated the 2001-12-08 14:52:12)


Here is a brief overview of the virus:

- First Discovered: July 17, 2001

- The virus is spread by E-Mail. The email will appear to be coming directly from the individual whose machine has been infected.

- The most common form of this virus inputs a random subject line (from a file randomly chosen on the victim's hard drive.) and adds something similar to this text to the body of the message:

Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks

- This virus will go through the user's inbox and address book to reply to any email address it can find. Anytime the computer is on the internet, it will continue to send out copies of itself.

- This worm has the possiblity of large-scale file deletion and distruction, although there appears to be a bug in the worm which normally prevents this from happening.

Removal Tool:
A free, downloadable removal tool is available for download from Symantec Corporation's website at the following address:

http://www.symantec.com/avcenter/venc/data/w32.sircam.worm%40mm.removal.tool.html

Rangenet (6:25 AM Monday Nov 18)