mgs
[Top] [All Lists]

Re: new virus

To: Martin <martin@virtual-motors.com>
Subject: Re: new virus
From: Bullwinkle <yd3@nvc.net>
Date: Tue, 25 Sep 2001 14:13:34 -0600
All:

<<<snip>>>
Attempts to delete files found in the following directories:
C:\Program Files\AntiViral Toolkit Pro\*.*
C:\eSafe\Protect\*.*
C:\Program Files\Command Software\F-PROT95\*.*
C:\PC-Cillin 95\*.*
C:\PC-Cillin 97\*.*
C:\Program Files\Quick Heal\*.*
C:\Program Files\FWIN32\*.*
C:\Program Files\FindVirus\*.*
C:\Toolkit\FindVirus\*.*
C:\f-macro\*.*
C:\Program Files\McAfee\VirusScan95\*.*
C:\Program Files\Norton AntiVirus\*.*
C:\TBAVW95\*.*
C:\VS95\*.*
<<<snip>>>

FWIW:

Note that these are all antivirus programs and they are located
in the standard location and directory an automatic installation
places them.  By deleting them, the virus opens up the computer
to infection.

You can prevent this from happening by installing these antiviral
progams in non standard locations using contrived directories. 
Most installations allow a "Custom" setup and you can change the
installation directory location and name.  To delete these non
standard locations, the virus would then have to search all of
your directories looking for the starting executable and deleting
it.  If you are running more than one drive, it would also then
have to search all drives too.  I have some of my programs on the
D or E drive, for that reason.

Blake

///
///  mgs@autox.team.net mailing list
///  or try http://www.team.net/cgi-bin/majorcool
///


<Prev in Thread] Current Thread [Next in Thread>