SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Pastimes : Computer Learning -- Ignore unavailable to you. Want to Upgrade?


To: broken_cookie who wrote (14505)1/4/2001 12:37:02 PM
From: mr.mark  Read Replies (1) | Respond to of 110652
 
richard

i have not heard of anything more on that virus. but then my only real source of info is the same link you posted, symantec. sorry can't provide any more info.

hope your friend gets squared away. are you helping them?

:)

mark



To: broken_cookie who wrote (14505)1/4/2001 2:50:53 PM
From: R Jennings  Read Replies (2) | Respond to of 110652
 
I searched a couple of virus sites (as I'm sure you have) and I agree that the prolin/creative virus doesn't seem to cause damage that prevents booting. It does mention that it loads itself on startup so maybe while your friend was trying to undo the virus (as we all would have) they may have caused some problems or they have a different virus.

'The worm then creates a copy of itself with the name Creative.exe under the subdirectory
C:\WINDOWS\Start Menu\Programs\Startup
The worm can do this only if C:\WINDOWS is the user's default Windows directory. Consequently, the worm is executed each time the user loads Windows after turning on the computer.'

So for arguments sake do they remember what they did and what the symptoms were ?

Good luck !
Rob