# Another virus question-sigh!

**URL:** <https://boards.straightdope.com/t/another-virus-question-sigh/82670>\
**Category:** Factual Questions\
**Created:** [September 19, 2001, 9:23pm UTC](https://boards.straightdope.com/t/another-virus-question-sigh/82670 "2001-09-19T21:23:45Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Guinastasia](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/guinastasia/32/5751_2.png) [@Guinastasia](https://boards.straightdope.com/u/Guinastasia)\
**Post date:** [September 19, 2001, 9:23pm UTC](https://boards.straightdope.com/t/another-virus-question-sigh/82670/1 "2001-09-19T21:23:45Z")

</div>

I am so sorry-I HATE doing this, but I do not understand a THING about viruses, and the update lists confuse the hell out of me.

[http://www.microsoft.com/windows/ie/downloads/critical/q290108/default.asp](http://www.microsoft.com/windows/ie/downloads/critical/q290108/default.asp)

> [@](#):
>
> Hi folks,  
> This morning, I managed to get a virus in my computer called TROJ\_SIRCAM.A.  
> The description of this virus is as follows:
> 
> This worm is a high-level program created in Delphi that propagates via email using SMTP commands. It sends copies of itself to all addresses listed in an infected user’s address book and in temporary Internet cached files. It arrives with a random subject line, and an attachment by the same name.
> 
> If you are receiving this mail, that means that you are in my email address book, and could also have gotten infected. In ,y particular case, the virus seemed to send itself out using a few of my Titanic documents as a mask: Titanic Chicago.doc, RMS trial.doc and Prosecution of White Star Line.doc.
> 
> If you find that you have this virus, go to [Trend Micro | Cybersecurity Solutions for Home](http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_SIRCAM.A)  
> for instructions on how to delete it from your system. The deletion process is very simple: you need to download a small free program that will scan your system and rid it of any corrupt files, which only takes a few minutes.

I have not opened any of the attachments, so I THINK I should be okay…

Manny, have mercy on me…

😉

---

<div class="post-metadata">

**Author:** ![Hanna](https://avatars.discourse-cdn.com/v4/letter/h/b3f665/32.png) [@Hanna](https://boards.straightdope.com/u/Hanna)\
**Post date:** [September 19, 2001, 9:38pm UTC](https://boards.straightdope.com/t/another-virus-question-sigh/82670/2 "2001-09-19T21:38:44Z")

</div>

And your question is…?? The Sircam virus was sent to me many times, but I haven’t seen it in awhile. Here is more info:  
[http://www.sarc.com/avcenter/venc/data/w32.sircam.worm@mm.html](http://www.sarc.com/avcenter/venc/data/w32.sircam.worm@mm.html)

Are you using an anti virus program (Norton’s, McAfee, Inouculate IT)? And with any anti virus program you must keep it updated. I check for updates daily. If you didn’t open any attachments you should be safe. With every Sircam email I got it had a message in the body of the email: **"I send you this to get your advice. See you later. Thanks.** The subject lines and the attached files names were the same, they are randomly selected from the sender’s “my documents” folder and attached.

---

<div class="post-metadata">

**Author:** ![Guinastasia](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/guinastasia/32/5751_2.png) [@Guinastasia](https://boards.straightdope.com/u/Guinastasia)\
**Post date:** [September 19, 2001, 9:45pm UTC](https://boards.straightdope.com/t/another-virus-question-sigh/82670/3 "2001-09-19T21:45:48Z")

</div>

No, the anti-virus software I HAD totally screwed up my computer. I just don’t open any attachments. Unless they are pictures, which are usually cut and past, so that’s just automatic.

Thank you, forgive my ignorance.

---

<div class="post-metadata">

**Author:** ![Hanna](https://avatars.discourse-cdn.com/v4/letter/h/b3f665/32.png) [@Hanna](https://boards.straightdope.com/u/Hanna)\
**Post date:** [September 19, 2001, 10:18pm UTC](https://boards.straightdope.com/t/another-virus-question-sigh/82670/4 "2001-09-19T22:18:37Z")

</div>

Guin…were you by any chance using McAfee? I had the same experience with that software. I don’t like it. Viruses can be bad, my brother had to replace his hard drive after he got one. I strongly suggest getting some anti-virus program, I use Inoculate It but Norton’s is said to be good. I know a lot of people say they have never used a virus protection program, but they have to be careful now because virus writers are thinking up new ways to spread their viruses and **you just never know**. An ounce of prevention and all that stuff…

Not opening attachements is a good policy, but some people need to be able to open documents sent to them. I have heard a little bit about it being _possible_ to hide viruses in some .jpgs now. Look out for stuff like “mycat.jpg.exe”, it looks innocent at first glance but could be a hidden virus in the .exe form.

---

<div class="post-metadata">

**Author:** ![DMC](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dmc/32/18049_2.png) [@DMC](https://boards.straightdope.com/u/DMC)\
**Post date:** [September 19, 2001, 10:25pm UTC](https://boards.straightdope.com/t/another-virus-question-sigh/82670/5 "2001-09-19T22:25:05Z")

</div>

Guinastasia,

If you normally open .jpgs, you should make sure you uncheck “Hide file extensions for known file types” under “Tools|Folder Options|View” in Windows Explorer.

Many trojans take advantage of this by naming the attachment something like “CoolPic.jpg.exe”, which appears as “CoolPic.jpg” if you have that box checked.

---

<div class="post-metadata">

**Author:** ![Guinastasia](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/guinastasia/32/5751_2.png) [@Guinastasia](https://boards.straightdope.com/u/Guinastasia)\
**Post date:** [September 19, 2001, 10:26pm UTC](https://boards.straightdope.com/t/another-virus-question-sigh/82670/6 "2001-09-19T22:26:28Z")

</div>

No, these have only been pictures from people I know, and they weren’t exe extensions. I honestly don’t remember what software it was…but I want to say Norton. It was okay, until I tried to do an upgrade-and then it just started fucking everything over.  
☹

I THINK I’m alright, as I did the scan…  
I’ll see what I can do…stupid virus writers-some people need lives!

---

<div class="post-metadata">

**Author:** ![DMC](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dmc/32/18049_2.png) [@DMC](https://boards.straightdope.com/u/DMC)\
**Post date:** [September 19, 2001, 10:37pm UTC](https://boards.straightdope.com/t/another-virus-question-sigh/82670/7 "2001-09-19T22:37:28Z")

</div>

Guinastasia,

I hate to sound overly persistent, but most trojans are likely to be from people you know. While you may be careful about what you open, you don’t have control over what they, or their friends, or their friends, etc., do.

You can read [this](http://www.cert.org/incident_notes/IN-2000-07.html) if you wish to learn more.

---

<div class="post-metadata">

**Author:** ![Earthling](https://avatars.discourse-cdn.com/v4/letter/e/90db22/32.png) [@Earthling](https://boards.straightdope.com/u/Earthling)\
**Post date:** [September 19, 2001, 10:49pm UTC](https://boards.straightdope.com/t/another-virus-question-sigh/82670/8 "2001-09-19T22:49:48Z")

</div>

**Guinastasia** , would you happen to remember any details from your antivirus update experience? I use Norton AntiVirus and haven’t had any problems. One thing I will say, though, is that the default setting is for NAV to automatically check for updates and load them on your PC - I have an innate distrust of automated, background updates, so I turned it off and only run the updates after shutting down other running apps. Another NAV default is to automatically run a full-system scan once a week, which I’ve also turned off.

One more thing, I’d strongly suggest getting a personal firewall regardless of whether you have an always-on (DSL or cable) connection or not. I have Norton’s product here also, but only because I got it in a package deal with NAV; otherwise, [ZoneAlarm](http://download.cnet.com/downloads/0-10105-108-57636.html?bt.37282.10014..dl-57636) is highly recommended and **free**.

---

<div class="post-metadata">

**Author:** ![BoBettie](https://avatars.discourse-cdn.com/v4/letter/b/4af34b/32.png) [@BoBettie](https://boards.straightdope.com/u/BoBettie)\
**Post date:** [September 20, 2001, 12:27am UTC](https://boards.straightdope.com/t/another-virus-question-sigh/82670/9 "2001-09-20T00:27:57Z")

</div>

I hate to bum anyone out, but I got the newest virus because the WEB SERVER at my college had it and I accessed their page. It is a security flaw in IE. Sucks to be me. I got it at home and all over at work.

I hate computers.

Zette

---

<div class="post-metadata">

**Author:** ![Guinastasia](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/guinastasia/32/5751_2.png) [@Guinastasia](https://boards.straightdope.com/u/Guinastasia)\
**Post date:** [September 20, 2001, 12:43am UTC](https://boards.straightdope.com/t/another-virus-question-sigh/82670/10 "2001-09-20T00:43:24Z")

</div>

So how do we know if we have it or not?

I looked for the so-called file and couldn’t find it.

No, what i meant by the JPGs was that they weren’t attachments, but cut and paste…I don’t open ANY attachments.
