sircam virus attachments

the sircam virus is the virus which sends out mail messages that look like:

Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks

along with the message it sends an attachment, which contains the virus plus a random file from the victim's computer.

sircam chooses the email recipient by looking in the victim's web cache. so folks who have their email address on busy web pages tend to get a lot of sircam messages.

i've been curious what the documents looked like, they're a peek into random people everywhere. so i set about extracting the documents. here's some of the results of that effort.

-dean
[ICO]NameLast modifiedSizeDescription

[DIR]Parent Directory  -
[TXT]4th Annual PTA.html10-Sep-2001 23:55 22K
[TXT]BIRTHDAY IDEAS.html10-Sep-2001 23:55 74K
[TXT]Bankrupt Firms.html17-Dec-2001 14:48 17K
[TXT]Branch Walkabout in Crookes and Commonside on Friday.html17-Dec-2001 14:57 6.5K
[TXT]Capital Punishment- rhetoric.html10-Sep-2001 23:55 21K
[TXT]Customer Service.html17-Dec-2001 14:48 12K
[TXT]DisplayUnits.html10-Sep-2001 23:55 8.0K
[TXT]Equipment List format-1.html17-Dec-2001 14:48 60K
[TXT]Fee, Buyer-4.html17-Dec-2001 14:48 42K
[TXT]GEOTABLE FINALLY!!!!!!!!!!!.html17-Dec-2001 14:48 68K
[TXT]HEADER.html11-Sep-2001 00:39 710
[TXT]INVOICE 98-978 PG 4.html10-Sep-2001 23:55 42K
[TXT]Information of hotel.html10-Sep-2001 23:55 67K
[TXT]Letter of Intent.html17-Dec-2001 14:48 47K
[TXT]PSA-Apartments.html17-Dec-2001 14:48 133K
[TXT]Raymond T Blaikner, Survey with cover page.html10-Sep-2001 23:55 22K
[TXT]Routine AR_BATCH_NO.html17-Dec-2001 14:57 11K
[TXT]Sagan's Wizard of Oz.html10-Sep-2001 23:55 15K
[TXT]ScholHoffman2.html10-Sep-2001 23:55 72K
[TXT]TKD Self Protection 1-20.html17-Dec-2001 14:48 25K
[TXT]Team work.html17-Dec-2001 14:48 6.8K
[TXT]Title(s) - best way to hold real estate.html17-Dec-2001 14:48 19K
[TXT]To whom it may concern.html10-Sep-2001 23:55 5.8K
[TXT]ccnastudy2.html10-Sep-2001 23:55 25K
[TXT]english.html17-Dec-2001 14:48 2.1K
[TXT]in progress.html10-Sep-2001 23:55 2.2K
[TXT]intervenants.html17-Dec-2001 14:57 39K
[TXT]irene mickizus.html10-Sep-2001 23:55 6.6K
[TXT]major research project.html10-Sep-2001 23:55 16K
[TXT]ote to alexi re 0994 #191.html10-Sep-2001 23:55 2.6K
[TXT]ppoint'00.html10-Sep-2001 23:55 29K
[TXT]programtillaeg_tekst_word6.html17-Dec-2001 14:59 102K
[TXT]reporter.html17-Dec-2001 14:48 1.9K
[   ]sircam-doc2html10-Sep-2001 23:39 862

Apache/2.2.9 (Debian) Server at arctic.org Port 80