Sircam

Sircam is a computer worm that propagates by e-mail from Microsoft Windows systems. It begins with one of the following lines of text and has an attachment consisting of the worm's executable with some file from the infected computer appended.
*I send you this file in order to have your advice
*I hope you like the file that I sendo you
*I hope you can help me with this file that I send
*This is the file with the information you ask for
*Te mando este archivo para que me des tu punto de vista
*Espero te guste este archivo que te mando
*Espero me puedas ayudar con el archivo que te mando
*Este es el archivo con la informacion que me pediste

Due to a bug in the worm, the message was rarely sent in any form other than "I send you this file in order to have your advice." This subsequently became an in-joke among those who were using the Internet at the time, and were spammed with e-mails containing this string sent by the worm.

Sircam was notable during its outbreak for the way it distributed itself. Document files (usually .doc or .xls) on the infected computer were chosen at random, infected with the virus and emailed out to email addresses in the host's address book. Opening the infected file resulted in infection of the target computer. During the outbreak, many personal or private files were emailed to people who otherwise should not have got them.

It also spread via open shares on a network. Sircam would scan the network for computers with shared drives and copy itself to a machine with an open (non-password protected) drive or directory. A simple RPC (Remote Procedure Call) was then executed to start the process on the target machine, usually unknown to the owner of the now-compromised computer.

Over a year later, Sircam was still in the top 10 virus charts.

ee also

*Notable computer viruses and worms