A virus/worm called Sircam continues to propagate among Windows computers across the Internet. The LBNL e-mail viruswall usually blocks about 350 viruses a month. On one recent day, the viruswall blocked 484 incoming Sircam viruses. When the viruswall blocks an infected message, it cleans the files and notifies the intended recipient of this action

If you receive a e-mail with "Virus Warning Message" similar to the example below, the viruswall blocked the virus and your computer is not infected. Delete the message.

****************** Virus Warning Message (on the network)

Found virus TROJ_SIRCAM.A in file filename.doc.pif
The file e/iscan/virus/virUHBfvaykF is moved to the configured virus directory.

*********************************************************

Note that this virus does not affect Macintosh computers.

Sircam can also write itself directly onto unprotected computer drives without going through the e-mail system. Here are steps you can take to defend against Sircam and other viruses and worms.

1. If you do not have Norton antivirus installed, download it from the Lab's software download page and install it. If you have difficulties, contact the computer support Help Desk by calling X4357 or filling out a Web-based help request.
   
   
2. If you have Norton antivirus installed, but have not updated the virus signature files since July 16th, use the "Live Update" feature of the Norton antivirus to perform the update. Again, the computer support Help Desk can help if you have difficulties.
   
   The Lab's standard software load for Windows98 and Windows2000 Micron computers includes the Norton antivirus application and is already configured to automatically do a live update.
   
   If Norton antivirus detects a virus and you don't know how to clean the virus from your system, contact the Help Desk.
   
   
3. Ensure that unprotected shares, shares that allow read-write access to everyone, are turned off by following these instructions. See the related article elsewhere in this edition of Computing News.
   

If you have difficulties, contact Gene Schultz at X2640 or EESchultz@lbl.gov

Specific information about the Sircam virus/worm is available at:
CNet
Symantec
Datafellows