TROJ SIRCAM.1 - SirC32.exe 1

• Jul 23, 2001

1
• #2

epohl

MIS

Mar 1, 2001

542

US

Xtian,

These were actual virus files and should not be required to run anything. You choose correctly when you choose to delete them. However they are still being referenced by your autoexec.bat and registry. Go to Norton's site for complete instructions on removal of this virus.

http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html

 

Upvote 0 Downvote

• Jul 23, 2001

• #3

epohl

MIS

Mar 1, 2001

542

US

Sorry that link should have been, and then choose sir.cam for removal instructions.

http://www.symantec.com/avcenter/vinfodb.html#threat_list

 

Upvote 0 Downvote

• Aug 2, 2001

• #4

jrjuiliano

MIS

May 1, 2001

447

US

I've been dealing with this one the last few days with my relatives and other home users.

What a pain!

I had to stress that it was absolutely NECESSARY to have a good virus scanner, up-to-date definitions, yada yada yada.

It's funny how home users don't really get this one right off the bat!

Anyway, just thought I'd share.
J.R. J.R. Juiliano
Information Systems Specialist
Tri-City Emergency Medical Group

 

Upvote 0 Downvote

• Aug 31, 2001

• #5

Guest_imported

New member

Jan 1, 1970

0

I've been infected too. NAV quarantined the files and I'm not able to run any applications. Has anyone had any success in removing the worm manually as per the Norton instructions?

thanks.

 

Upvote 0 Downvote

• Aug 31, 2001

• #6

jrjuiliano

MIS

May 1, 2001

447

US

My parents ran through the instructions with little or no problem from Symantec's site with their tool.

I believe they ended up running it in safe mode per the instructions, but it worked just fine.

Good luck! J.R. Juiliano
Information Systems Specialist
Tri-City Emergency Medical Group

 

Upvote 0 Downvote

• Aug 31, 2001

• #7

yvfwc

MIS

Jun 25, 1999

303

US

It has worked for some staff on their home pc's. See:

http://www.sarc.com/avcenter/venc/data/w32.sircam.worm@mm.html

Cheers,

Mark ;-)

 

Upvote 0 Downvote

• Sep 3, 2001

• #8

Guest_imported

New member

Jan 1, 1970

0

http://housecall.antivirus.com/housecall/

try this site you can use their online scanner or remove the worm yourself through their instructions

 

Upvote 0 Downvote

• Sep 16, 2001

• #9

Guest_imported

New member

Jan 1, 1970

0

There's a removal way there. It worked for me under WinMe.
I'll never open/read strange e-mails!!!

http://www.acam.ca/SirC32/

 

Upvote 0 Downvote

• Oct 22, 2001

• #10

AVChap

Technical User

Jun 11, 2001

786

PH

What you need to do is look for this registry key:

HKEY_CLASSES_ROOT\exefile\shell\open\command\Default

and change the entry to "%1" %*

This should fix the problem of executables looking for the SirCam file.

Cheers,

AVChap

 

Upvote 0 Downvote