General discussion

Locked

Sircam virus !

By ekb ·
Recently one of my branch was hit by Sircam virus before my NAV CE 7.5 was updated to the latest version of virus definition.

I have manaully checked and removed the virus from all the PCs in my branch.

But recently i found out that the virus is still reside somewhere where once in a I receive complaint from my user saying that their PC is infected by Sircam virus.

Suggestion and advice are welcome to help me resolve this problem.

Thanks.

This conversation is currently closed to new comments.

12 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Sircam virus !

by dmiles In reply to Sircam virus !

You may have missed a file extension that it created,to which you may have to remove using command line or DOS
see the following sites for info for removal,no spaces in url's
http://www.antivirus.com/vinfo/virusencyclo/default
http://www.mcafee.com/dispVirus.asp?virus_k
www.sarc.com

Collapse -

Sircam virus !

by ekb In reply to Sircam virus !

Actually i have downloaded Symantec's and McAfee's removal tool where it doesn't detect any Sircam virus.

I run the removal tool first, then i run a manually removal method which suggested in Symantec web site.

Collapse -

Sircam virus !

by ekb In reply to Sircam virus !

I have the removal tool from Symantec and i even download the removal tool from McAfee web site.

Is the anyway to be sure no Sircam virus in my network?

Collapse -

Sircam virus !

by dmiles In reply to Sircam virus !

Check the following site for info on scanning network for virus
http://www.ou.edu/helpdesk/virusinfo.html

Collapse -

Sircam virus !

by Shanghai Sam In reply to Sircam virus !

Most of the link is referring to Symantec or McAfee.

Actually i already visited Symantec and McAfee web site for removal and info.

Thanks for your help anyway.

Collapse -

Sircam virus !

by oskiller In reply to Sircam virus !

If you are looking to ensure it is removed from every system, you are in for some work. The best way to handle it would be to disconnect EVERY machine from the network until it is scanned and proven clean. This would include servers as well as workstations.

Collapse -

Sircam virus !

by ekb In reply to Sircam virus !

Is there any alternative ? How about CleanSweep feature in Norton Antivirus?

Collapse -

Sircam virus !

by oskiller In reply to Sircam virus !

Due to the nature of the virus, the best alternative is to disconnect all machines until they verified as clean. If you have the latest signature file for NAV, then after scanning and cleaning, you should be fine.

One additional thing to note about Sircam is this - it also activates any other viruses that it finds on your system that may have been dormant or "fixed". These are then passed on to other machines as well. That is why I recommend disconnecting the machines until it is cleaned up. I know this is a tremendous amount of work, but sometimes it needs to be done. I had to do this to over 200 pc's once.

Collapse -

Sircam virus !

by oskiller In reply to Sircam virus !

And CleanSweep might work, but who is to say it does not leave the machine while scanning and infect another machine. I hate to be redundant, but by disconnecting all machines until they are clean, you can help prevent it from spreading.

Back to Security Forum
12 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums