| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 10752 | 2001-08-10 07:40:00 | Sircam.worm@mm | Guest (0) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 16767 | 2001-08-10 07:40:00 | Hi, We had a bout of this on our network, I got FixSirc.com from Symantec which has worked on all PC's bar one. When booted it displays the following message. 'Cannot find the file '\recycled\SirC32.exe' or one of its components. Make sure the path and filename are correct and that all required libraries are available'. I have ran FixSirc.com twice, the first time it detected and removed the worm, then rebooted and got that message, the second time it detected nothing and still gives that message after booting. There are no keys refering to SirC32 in the registry. Would there be a key in the Reg I could delete to stop that message? Another thing of intrest was the machine would not boot in Safe Mode, I tried holding Ctrl (no go) and in the end I enabled the Start Up Menu through msconfig, still would'nt boot in Safe Mode though. After removing the virus its still locking up in Safe Mode, running full Win98se everything is fine. TIA, Ken. |
Guest (0) | ||
| 16768 | 2001-08-10 08:37:00 | It sounds like its trying to start its self on boot. Have a look in msconfig for an entry in start up, or win.ini - [windows]. You will need a program like Startup Control Panel to see all startup items. |
Guest (0) | ||
| 16769 | 2001-08-10 11:00:00 | It may also be in your c:\Autoexec.bat file. Remove the line from Autoexec.bat, if present: \recycled\Sirc32.exe Manual Removal Instructions here: (www.antivirus.com) Also: 2 good tools to remove SirCam properly: (www.woram.com) and read the ReadMe.txt. And another good cleaner: (www.antivirus.com) Read the info and then scroll down to 'to remove the Trojan completely.' |
Guest (0) | ||
| 16770 | 2001-08-11 03:05:00 | Thanks guys, Twas the \recycled\Sirc32.exe left in the Autoexec.bat. All sweet now. :) Ken. |
Guest (0) | ||
| 1 | |||||