http://www.digitaljournal.com/article/33111

The Network Worm ''SirCam'' Breaks Records for Spreading

Posted Jul 27, 2001 by Digital Journal Staff
Untitled
CAMBRIDGE (United Kingdom) - In only six days since its detection on July 18, the network worm "SirCam" has spread throughout the world and has convincingly seized first place amongst the most wide-spreading malicious programs. At this time, Kaspersky Labs’ technical support department has received tens of thousands of messages from France, the USA, Canada, China, Russia, Spain, India, United Kingdom, Germany, Poland, Italy, Turkey, Argentina, and many other countries reporting infection by "SirCam."
"’SirCam’ uses the same technological means for spreading and penetrating a computer as the infamous worms 'Loveletter' and 'Melissa' and their like. 'SirCam’s' spreading ability confirms the fact that many users haven’t learned their lesson from the previous global epidemics, and even to this point have not grasped the importance of timely adding anti-virus updates and using caution when dealing with e-mail attachments from even known sources," said Denis Zenkin, Head of Corporate Communications for Kaspersky Labs.
"SirCam" spreads as a file attachment to an e-mail, and at the same time, this file does not have a consistent name, extension and a message text. In addition to this, the worm is sent out from infected computers supposedly on behalf of its creator. In order to do this unbeknownst to a user, it creates fake e-mails and sends them to all addresses found in the infected PC. Such a lack of outer-appearance continuity has fooled many users into believing in the sent-files’ authenticity and safety. Without suspecting foul play, users open these files on their computers, single-handedly infecting their own systems.
It is also necessary to remember "SirCam’s" dangerous side effect: in addition to taking up free space on a disk, the worm deletes, with a 5% probability, all files and subdirectories from the Windows directory.
Defense procedures for thwarting the "SirCam" network worm already have been added to Kaspersky™ Anti-Virus database as of July 18. Kaspersky Labs strongly urges users to download and install the "SirCam" update.
For those using a different anti-virus, Kaspersky Labs has developed a special detection utility for complete "SirCam" eradication (including Windows system registry recovery). You may download the program free of charge from ftp://ftp.kaspersky.com/utils/clrav.com
More in-depth information about the "SirCam" worm is available in the Kaspersky Virus Encyclopedia.
www.mcaffee.com
www.kaspersky.com