10/9/2023 0 Comments W32 sircam worm virusThe worm copies itself as 'SirC32.exe' to \Recycled\ folder. When the worm runs on a clean system it copies itself to different locations with different names. While the user is checking the document the system get infected (as described above). ![]() This effectively disguises the worm's activity. The file is displayed with the appropriate program according to its extension: When a Sircam-infected email attachment is opened it shows the document it picked up from the sender machine's.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |