Discussion Locked

Sicom32 Virus

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Dear all

Our server is affected by sircom32 virus. and it's sperading to all our nodes. even we are having mcafee 4.5 regularly we are updating. mcafee is cleaning the virus, but again and again it's coming. even though we removed the entry in autoexec.bat & reclyed bin. but still it's there in our machine. is there is any way to clean permanently. pls. help us.

sakthi

5 replies

by bean baggins

What O/S is on your server and PC's?. If they are Win9X then the infecting files are hiding in the recycle bin. Boot to a command prompt (F8 key on start-up) or better yet from a clean boot disk with the "attrib" command on it, type "path a:", thenchange to C:\recycled. Type "attrib *.* -s -h -r -a" to remove all attributes on all files then delete *.* in that folder. Delete all folders in C:\recycled as well. When you've done this boot to Windows safe mode, go to run and run regedit. Back upthe registry then search for and delete all entries with "sirc" or "scam" as part of the key value or data value and remove the entries from autoexec.bat again. Do this on all PC's on the network and you should be clean. Good Luck

This discussion is closed to new replies.