A thought on the SIRCAM "virus" [Archive] - Chevelle Tech

: A thought on the SIRCAM "virus"


Daves70
Aug 29th, 01, 2:45 PM
Fortunately I have not yet received it. I just had a thought after reading Al's reply to a post in Bench Racing. I don't know what this "virus" looks for, but it obviously infects all files in the My Documents directory. Has anyone analyzed HOW it finds the My Documents directory? Does it search for .doc files or does it find the directory by name? If the latter is the case, I suggest renaming the My Documents folder to something else. Thus giving yourself a quick 'n easy vaccination. 'Course the right way would be to not download/open the file http://www.chevelles.com/forum/smile.gif

FWIW: I always rename my Winblows directories since most virues look for the default directory names. It won't be 100% effective, but it'll keep the honest viruses at bay http://www.chevelles.com/forum/smile.gif

------------------
Dave Vanderputten
1970 Malibu 307/M20 4-speed/3.08
(Eternally in progress)
TC GOLD #867
ACES# 3967
http://daves70.freeservers.com

BobMcC
Aug 29th, 01, 4:13 PM
There are several different "sircam" viruses. Here is one place you can read about the July version - W32/SIRCAM@MM. http://vil.mcafee.com/dispVirus.asp?virus_k=99141&

------------------
Bob McCormick
69 Malibu project