Solved

sircam virus

Posted on 2001-07-26
6
235 Views
Last Modified: 2012-08-14
I'm trying to clean a machine that was infected with the sircam virus.

I ran through a dr solomon's scan
(updated to  virus def file 4.0.4150 scan engine 4140)

it found the virus, but couldnt clean, so i deleted the files instead.

Now when i try and run Word97 (or other.exe files)  - an error appears - sircam32.exe is needed to open file of this type

But if i run word by clicking on a word document instead, it runs ok. Outlook 2k also seems to seems to work, but i can't access anything in control panel, or run regedit or scandisk...

Any suggestions?

0
Comment
Question by:jlymn
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 20

Expert Comment

by:Dufo G. Belski
ID: 6322101
Have a look at this question which was posted to this topic area immediately before you posted yours.
 
http://www.experts-exchange.com/jsp/qShow.jsp?ta=virus&qid=20158227

It has a link to a lot of information about the virus, and on the linked page are more links to various  removal tools, like SCRMOVE2.ZIP, available here:

http://www.mcafeeb2b.com/naicommon/avert/avert-research-center/tools.asp

0
 

Author Comment

by:jlymn
ID: 6326080
The scrmove2.zip file didn't help. I stil have the problem of clicking on an exe and an error occuring.

Nothing i see on the web page mentions anything about this. The virus does seem to be removed, but the damage has been done - how could i fix this?
0
 
LVL 20

Expert Comment

by:Dufo G. Belski
ID: 6326467
0
Revamp Your Training Process

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action.

 
LVL 20

Accepted Solution

by:
Dufo G. Belski earned 100 total points
ID: 6326470
"an error appears - sircam32.exe is needed to open
file of this type"

This comes up because the virus modifies the registry key

HKEY_CLASSES_ROOTexefile\shell\open\command

The tool above fixes the registry.

0
 

Author Comment

by:jlymn
ID: 6326840
that fixed it

Thanks!
0
 
LVL 20

Expert Comment

by:Dufo G. Belski
ID: 6326982
Great!!!
0

Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

HOW TO REMOTELY CLEAN MEROND.O WITH ESET SILENTLY PROBLEM       If you have the fortunate luck to contract the Merond.O virus on your network, it can be quite troublesome to remove as it propagates to network shares on your network. In my case, the …
If you thought ransomware was bad, think again! Doxware has the potential to be even more damaging.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question