Results 1 to 2 of 2
  1. #1
    2 Star Lounger
    Join Date
    Jan 2001
    Location
    Canberra, Australia, Australian Capital Territory, Australia
    Posts
    187
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Can the Sircam Virus Run without Being Opened? (OL2k)

    Having just had to cleanout our LAN after the sircam virus ran amok (no real damage but very hard to remove!), can someone confirm that this virus can't possibly have got into our lan without someone trying to open the attached virus file in an email?
    Is it possible that someone got the email while they were out and it ran automatically without a user opening it?
    In other words - did we get the virus BECAUSE we use outlook - or did we get it because some user carelessly opened it & had out of date virus protection?
    All comments greatfully received.

  2. #2
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Roanoke area, Virginia, USA
    Posts
    3,729
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Can the Sircam Virus Run without Being Opened? (OL2k)

    <A target="_blank" HREF=http://www.sarc.com/avcenter/venc/data/w32.sircam.worm@mm.html>http://www.sarc.com/avcenter/venc/data/w32...am.worm@mm.html</A> this is an attachment virus from what i gather. Attachment viruses will not run automatically - ol does not open attachments without user intervention.

    all the copies i had have been deleted so i can't verify that it doesn't have a script.

    if it's a script virus (such as Kak), under ol2000 without the security patch, it might run if the message is opened, but will not run in the preview pane - so it can not infect an unattended machine. you can adjust security settings to prevent it from running at all.

    also, on the infected machine, check the security tab in tools > options - it should be set to force all files to be saved to the hard drive before opening, making it more difficult to trick users with double extensions. also turn on show all file extensions in windows explorer's tools > folder options.

    up-to-date virus definations may have stopped it - especially if you got it later in the infection. Norton had news defs out by thurs. and with the media attention the worm got, all workstations should have been updated.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •