Solved

sircam virus

Posted on 2001-07-26
6
223 Views
Last Modified: 2012-08-14
I'm trying to clean a machine that was infected with the sircam virus.

I ran through a dr solomon's scan
(updated to  virus def file 4.0.4150 scan engine 4140)

it found the virus, but couldnt clean, so i deleted the files instead.

Now when i try and run Word97 (or other.exe files)  - an error appears - sircam32.exe is needed to open file of this type

But if i run word by clicking on a word document instead, it runs ok. Outlook 2k also seems to seems to work, but i can't access anything in control panel, or run regedit or scandisk...

Any suggestions?

0
Comment
Question by:jlymn
  • 4
  • 2
6 Comments
 
LVL 20

Expert Comment

by:Dufo G. Belski
ID: 6322101
Have a look at this question which was posted to this topic area immediately before you posted yours.
 
http://www.experts-exchange.com/jsp/qShow.jsp?ta=virus&qid=20158227

It has a link to a lot of information about the virus, and on the linked page are more links to various  removal tools, like SCRMOVE2.ZIP, available here:

http://www.mcafeeb2b.com/naicommon/avert/avert-research-center/tools.asp

0
 

Author Comment

by:jlymn
ID: 6326080
The scrmove2.zip file didn't help. I stil have the problem of clicking on an exe and an error occuring.

Nothing i see on the web page mentions anything about this. The virus does seem to be removed, but the damage has been done - how could i fix this?
0
 
LVL 20

Expert Comment

by:Dufo G. Belski
ID: 6326467
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 
LVL 20

Accepted Solution

by:
Dufo G. Belski earned 100 total points
ID: 6326470
"an error appears - sircam32.exe is needed to open
file of this type"

This comes up because the virus modifies the registry key

HKEY_CLASSES_ROOTexefile\shell\open\command

The tool above fixes the registry.

0
 

Author Comment

by:jlymn
ID: 6326840
that fixed it

Thanks!
0
 
LVL 20

Expert Comment

by:Dufo G. Belski
ID: 6326982
Great!!!
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

As more computers now shipped with 64-bit version of Windows, more users are now using this Operating System.  So it's important to be aware how some 32-bit diagnostic tool works on these systems, so we know what to expect when analyzing the logs an…
Change your password...do it now!. Probably the easiest point of access to your account is through guessing your password. If your password is guessable, do change it now. If not for your sake but for everyone else in your friends list. Remember …
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Learn how to create flexible layouts using relative units in CSS.  New relative units added in CSS3 include vw(viewports width), vh(viewports height), vmin(minimum of viewports height and width), and vmax (maximum of viewports height and width).

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now