Virus question

[Smizack]

This is what a friend told me about his virus problem. Can anyone help with this.
It's WinME.
"I run Norton and it says that I have 18 infected files in c:/restore or something like that. So first I try to "clean" them and it says it can't because it is in the restore file, then I try to "erase" same thing and last I try to quarantine them and it says it again. I also tried Mcafee no results there."

[Smizack]

He said Norton called the virus "Sircam virus"

[Fingers]

You need "system restore remover pro" a nifty little prog that disables restore.
This deletes restore you can the enable it againg if you wish.

But If you have the "Sircam" virus.!!!!!!!!!!!

Oh dear dear all Id say is get all the info you can re getting rid of this pig. It involves some reg editing and manual delition of files.

Good luck

[Smizack]

Originally posted by Fingers
You need "system restore remover pro" a nifty little prog that disables restore.
This deletes restore you can the enable it againg if you wish.

But If you have the "Sircam" virus.!!!!!!!!!!!

Oh dear dear all Id say is get all the info you can re getting rid of this pig. It involves some reg editing and manual delition of files.

Good luck

I don't have it, a friend does, he emailed me at work.
I looked up some stuff at antivirus.com that shows where it is in the registry and sent that to him.
Where can you get System restore remover pro?

[Jon]

Here you go:

[Smizack]

Originally posted by Jon
Here you go:

Thanks to eveyone for the replies.
I can't open that file at work, but what is it?

[Fingers]

Sircam is going round alot of pc's

Its normally send to you via Email under the guise of

" I am send you this to ask yor advice"

Sort of Crap

Its a worm that really screws things up big stile. Plus it attatches to your address book and send its self out.

Virus's ?....is it all just a big conspiricy?.....I wonder!

[UnseenMenace]

Originally posted by Smizack
This is what a friend told me about his virus problem. Can anyone help with this.
It's WinME.
"I run Norton and it says that I have 18 infected files in c:/restore or something like that. So first I try to "clean" them and it says it can't because it is in the restore file, then I try to "erase" same thing and last I try to quarantine them and it says it again. I also tried Mcafee no results there."

Cannot repair, quarantine, or delete a virus found in the _RESTORE folder

One of the new features of Windows Me is System Restore. This feature, which is enabled by default, is used by Windows to restore files on your computer in case they become damaged. Windows Me keeps the restore information in the _RESTORE folder. A _RESTORE folder is created on each hard drive on the computer; these folders are updated when the computer restarts.

If the computer is infected with a virus, then it is possible that the virus could be backed up in the _RESTORE folder. By default, Windows prevents System Restore from being modified by outside programs. Because of this, any repair attempts made by Norton AntiVirus will fail. To work around this, you must disable System Restore, and restart the computer. This will purge the contents of the _RESTORE folder. You must then run a full system scan.

To disable System Restore:

1. Close all open programs.
2. Right-click My Computer on the Windows desktop, and then click Properties.
3. Click the Performance tab.
4. Click File System.
5. Click the Troubleshooting tab.
6. Check Disable System Restore, click OK, and then click Close.
7. Click Yes to restart. This disables the System Restore feature and will purge the contents of the _RESTORE folder when the system is restarted.
8. Run a full system scan, making sure that NAV is set to scan all files and all drives.
9. After cleaning the infected files, repeat steps 1 through 7, except in step 6, uncheck Disable System Restore.

Hope this helps

Also if your friend has Sir Cam virus you can obtain information about this virus and a cleaner from Here (http://www.sarc.com/avcenter/venc/data/w32.sircam.worm@mm.html)