eine kleine hilfe hab ich gefunden den virus manuell zu entfernen, leider nur in englisch!
Manual Removal Method
1. In a command window or MS-DOS mode, copy Regedit.exe to Regedit.com.
2. Power down the computer, wait half a minute, then power up the computer.
3. Immediately press the F8 key once a second repeatedly until the Windows Startup menu appears. If the BIOS presents a keyboard error, press F1 to resume and continue pressing the F8 key once a second.
4. In the Windows Startup Menu, select Safe Mode.
5. Run Regedit.com. Backup the Registry by selecting Export Registry file from the Registry menu. Export the entire registry ("All").
6. Remove the worm entries from the Registry.
HKCR\exefile\shell\open\command\Default="C:\recycl ed\SirC32.exe" "%1" %*
HKLM\Software\Microsoft\Windows\CurrentVersion\ RunServices\Driver32=C:\WINDOWS\SYSTEM\SCam32.exe
HKLM\Software\Sircam
7. Delete all files related to SirCam (Scam32.exe, Sircam.sys, sirc32.exe, etc.) and empty the Recycle Bin.
8. The worm may have modified Autoexec.bat. Remove the line "@win \recycled\sirc32.exe".
____________________________________
A.C.A.B.
|