Sircam

Sircam is a computer worm that propagates by e-mail from Microsoft Windows systems. It begins with one of the following lines of text and has an attachment consisting of the worm's executable with some file from the infected computer appended. It affected computers running Windows 95, Windows 98, and Windows ME (Millennium) .

Due to a bug in the worm, the message was rarely sent in any form other than "I send you this file in order to have your advice." This subsequently became an in-joke among those who were using the Internet at the time, and were spammed with e-mails containing this string sent by the worm.

Sircam was notable during its outbreak for the way it distributed itself. Document files (usually .doc or .xls) on the infected computer were chosen at random, infected with the virus and emailed out to email addresses in the host's address book. Opening the infected file resulted in infection of the target computer. During the outbreak, many personal or private files were emailed to people who otherwise should not have received them.

It also spreads via open shares on a network. Sircam scans the network for computers with shared drives and copy itself to a machine with an open (non-password protected) drive or directory. A simple RPC (Remote Procedure Call) is then executed to start the process on the target machine, usually unknown to the owner of the now-compromised computer.

Over a year after the initial 2001 outbreak, Sircam was still in the top 10 on virus charts.

See also

References

  1. ↑ "Win32/SirCam". ESET. Retrieved 9 February 2013.


This article is issued from Wikipedia - version of the 8/12/2015. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.