Help getting rid of the last bit of SirCam

[flamingelephant]

Ha, the power just went out so I had to restart some of the computers in the office.
I did one, and it tried to execute the sircam virus file in the recycled directory but couldn't cause its not there... I ran the virus checker from the symantec site and it couldn't find it. I knew some of the other staffs computers got infected but I thought they took care of all of it (maybe that explains why the rundll32 file was missing from her system 2 weeks age) Anyhow, all the systems are clean except her computer still tries to run the thing on startup... How can I stop it? During startup you get a nice pop-up box with the large red x saying it can't find the file...
Thanks

 

[Platypus]

format c: /y

 

[TallBill]

do a registry edit... do a search for the file that the box with the x is looking for... delete that entry from the registry.. there might be a few.. backup yer registry before ya do this tho unless you know what yer doing

 

[gittyup]

W32.Sircam.Worm@mm Removal Tool

 

[flamingelephant]

I tried the tool, its been run already and got rid of all the files, so now it can't find any trace of the virus, but windows on startup still tried to run it....
I'd really like to avoid messing with the registry (I seem to be quite good at messing around with my home computer, but we are running a fairly important database on the one here at work that I really don't wanna f*ck up... Is there any way to get rid of the command without doing a regedit?

 

[vi edit]

click on "start", go to "run" and type in "edit c:\autoexec.bat". This brings up a dos window. Find the line that says "@win=c:\recycled\sircam32.exe" or something very similar to that. Using the mouse, highlight the line and hit the delete key. Click on the close button and say "yes" to the "do you want to save your changes" prompt.

Reboot the machine. Should be free of that error.

 

[flamingelephant]

Thanks vi_edit,
that entry was there in the autoexec file...
I guess win95 still uses then...
BUT
now when it starts to boot to windows, it shows the win 95 screen for awhile, then jumps to the dos screen but its frozen....
I don't know why its doing this, cause I only removed the sircam line from autoexec.... It was the only thing there....
Any ideas
(it does start in safe mode, I'm gonna try and see what the problem is)

 

[KatLei]

reformat reformat reformat...

 

[flamingelephant]

no! no! no!

Any ideas on the failed reboot?
What should be in a win95 autoexec file? or does sircam rename it to something? (so I can re-rename it and get things working smoothly again)

 

[flamingelephant]

Ah HA! I think i got it...
@ECHO OFF
LH DOSKEY

Seems to work fine....
Although, the old SCSI in this thing sounded like it was going take off and fly apart!!!

AnAndTech Forums RULE!!!