×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

TROJ SIRCAM.1 - SirC32.exe

TROJ SIRCAM.1 - SirC32.exe

TROJ SIRCAM.1 - SirC32.exe

(OP)
Hi,

I got infected this morning by TROJ SIRCAM.A

I didn't have the last pattern files uptodate

After I got the last updated files, Norton Anti-Virus detected that SirC32.exe and SCam32.exe were infected. I chose to repair and delete them.

Unfortunately, as SirC32.exe is missing I can't run others application than IE.

Anyone running WINDOWS 98 (2nd Edition) could send to me these 2 files ( SirC32.exe and Scam32.exe) to clegall2000@yahoo.com ?

Thanks in advance,
Christian,

RE: TROJ SIRCAM.1 - SirC32.exe

Xtian,

These were actual virus files and should not be required to run anything. You choose correctly when you choose to delete them. However they are still being referenced by your autoexec.bat and registry. Go to Norton's site for complete instructions on removal of this virus.

w32.sircam.worm@mm.html" TARGET="_new">http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html

RE: TROJ SIRCAM.1 - SirC32.exe

I've been dealing with this one the last few days with my relatives and other home users.  

What a pain!  

I had to stress that it was absolutely NECESSARY to have a good virus scanner, up-to-date definitions, yada yada yada.

It's funny how home users don't really get this one right off the bat!

Anyway, just thought I'd share.
J.R.

J.R. Juiliano
Information Systems Specialist
Tri-City Emergency Medical Group

RE: TROJ SIRCAM.1 - SirC32.exe

I've been infected too.  NAV quarantined the files and I'm not able to run any applications.  Has anyone had any success in removing the worm manually as per the Norton instructions?

thanks.

RE: TROJ SIRCAM.1 - SirC32.exe

My parents ran through the instructions with little or no problem from Symantec's site with their tool.  

I believe they ended up running it in safe mode per the instructions, but it worked just fine.

Good luck!  

J.R. Juiliano
Information Systems Specialist
Tri-City Emergency Medical Group

RE: TROJ SIRCAM.1 - SirC32.exe

http://housecall.antivirus.com/housecall/

try this site you can use their online scanner or remove the worm yourself through their instructions

RE: TROJ SIRCAM.1 - SirC32.exe

There's a removal way there. It worked for me under WinMe.
I'll never open/read strange e-mails!!!


http://www.acam.ca/SirC32/

RE: TROJ SIRCAM.1 - SirC32.exe

What you need to do is look for this registry key:

HKEY_CLASSES_ROOT\exefile\shell\open\command\Default

and change the entry to "%1" %*

This should fix the problem of executables looking for the SirCam file.

Cheers,

AVChap

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close