Results 1 to 4 of 4

Thread: The Sscache32 Virus/trojan

  1. #1
    Poster
    Join Date
    Sep 2002
    Posts
    1,231
    This is actually a rather OLD trojan and it's EASY to get.
    Many popular EXEs in the size range of 50 KB to 3 MB are copies of it.
    It has about 100 fake filenames it uses and secretly shares them from the c:\windows\cache32
    c:\windows\scache32
    OR
    c:\windows\sscache32
    folder.

    This causes reported files shared at bottom right to EXCEED the number reported shared in My Kazaa Lite! (those hidden files won't show up in the shared list...)
    Also, to SEE the files on your hard drive, you have to turn on show all hidden files in Windows Explorer and browse the above-mentioned directories (if they exist, which if you're NOT infected should NOT exist.)

    Regular FIND files on your computer WON'T detect it due to Microsoft disabling whole-drive-search ability (at least on Drive C to prevent 'newbies' from accidentally damaging the Windows/system/programs files.

    It is NOT in the installer for Kazaa Lite shared by any of the KL++ file mirrors, although a newer version of this virus/trojan may include that as yet another of its fake names.

    The filenames I sometimes use to intentionally find it and warn people are:
    BearShare 5.1.1.exe (a nonexistant BearShare version)
    and
    Ad Aware 6.5.exe (I don't know if Ad Aware has reached this version number yet...)
    and
    Kazaa 2.5.0.exe (yet another reason NOT to use regular Kazaa&#33

    Lastly, if infected, you may be able to spot them uploading/uploaded to people in your UPLOADS window.

  2. File Sharing   -   #2
    Wise Kvcd Maker/PIMP
    Join Date
    May 2003
    Age
    39
    Posts
    3,412
    Good looking out with this TIP

  3. File Sharing   -   #3
    I dont see either of those folders in my windows directory, I guess that means that I'm in the clear

  4. File Sharing   -   #4
    Poster
    Join Date
    Feb 2003
    Posts
    1,223
    cant see any suspicious file, looks like i'm good


    proud to be american

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •