-
July 23rd, 2001, 03:00 PM
#1
SIRCAM
We just got hit with the Sircam mass-mailing worm. The owner had it and sent it to a ton of people.
I used the FIXSIRC.COM tool from http://www.sarc.com since our antivirus program is obvious out of date. The FIXSIRC.COM file found every computer in the office infected, and cured all but mine. I'm the sucker with Windows ME. Everyt ime I run it it tells me taht it couldn't fix all the files and to run it again in Safe Mode. I even get this message when I run it is Safe Mode.
Question: Is it possible that the FIXSIRC.COM tool on SARC's site is detecting files that aren't the virus? It looks like only one computer was mailing the stuff out. Maybe I don't really have it?
--------------------------
Laugh at your problems... Everybody else does!
-
July 24th, 2001, 05:41 PM
#2
It could be possible.... After reading your post, I downloaded the cleaner and ran it on several of our systems (all of them were clean) and in each case, it reported no infection found.
-
July 24th, 2001, 10:02 PM
#3
Registered User
disable system restore then boot off a 98 boot disk. Deltree the _restore directory from dos then reboot and try cleaning it.
re-read the link you posted, mostly the part where it says CAUTION:
-
July 25th, 2001, 08:11 AM
#4
the FIXSIRC.com utility seems to have disappeared from their site...anywhere else to get it? or am i looking in the wrong place?
-
July 25th, 2001, 11:29 AM
#5
Registered User
-
July 26th, 2001, 12:28 AM
#6
I love this virus
virus, worm, smtp engine, it does it all.
If they find the guy they will either throw his *** in jail or hire him on the spot to show them how the hell he did it. <IMG SRC="smilies/biggrin.gif" border="0">
He who can laugh at himself will never cease to be amused.
-
July 26th, 2001, 12:31 AM
#7
What gives?
I can't say "A$$" without the "***" marks coming up.
Mr.Moderator, isn't this a little extreme?
He who can laugh at himself will never cease to be amused.
-
July 26th, 2001, 10:41 AM
#8
Please - I agree with the moderators, we all know what was meant by the *** - please don't make an issue.
Thanks
Death is lighter than a feather - duty heavier than a mountian.
The answer to your question is: 00110100 00110010
-
July 26th, 2001, 05:20 PM
#9
Registered User
Got a customer's machine here where they're using some bizarre antivirus that detected and cleaned the worm, but only AFTER it had already done its damage.
Now the fix from Symantec won't fix the damage done, because it says the system isn't infected!!! <IMG SRC="smilies/mad.gif" border="0"> <IMG SRC="smilies/mad.gif" border="0"> <IMG SRC="smilies/mad.gif" border="0">
Flash! Don't heckle the supervillain!
-
July 27th, 2001, 06:22 AM
#10
Registered User
Originally posted by Wayward Clam:
<STRONG>Got a customer's machine here where they're using some bizarre antivirus that detected and cleaned the worm, but only AFTER it had already done its damage.
Now the fix from Symantec won't fix the damage done, because it says the system isn't infected!!! <IMG SRC="smilies/mad.gif" border="0"> <IMG SRC="smilies/mad.gif" border="0"> <IMG SRC="smilies/mad.gif" border="0"></STRONG>
What's the anti-virus program anyways? Gotta love good ol CR, one of my best friends works at one <IMG SRC="smilies/biggrin.gif" border="0">
Hard work often pays off in the long run, but Lazyness always pays off now.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|
Bookmarks