Hi folks!

Know this probs the place to do this but i need some help wi my dam PC!

Prob is that i cant open anything on my PC. When i click on an icon this message appears:

C:\RECYCLED\SIR32.EXE file appears to be corrupt, reinstall and try again.


Then under that message is another which says with a big red cross:

Acess to the specifield device, path, or file is denied.

Any ideas? Do i have to wipe everything on my hard drive and start again which will mean losing alot of stuff or where do i get this file i need?

I know this isn't the place but i hope any inspiring wannabes with the skills could help as there aint much happenin in the job market at the mo!

Cheers

Stu

I haven't done desktop support in a while, and I've never heard of the file sir32.exe, so I've got no idea what it does.

What operating system are you running?

I've checked support.microsoft.com (http://support.microsoft.com) and can't see any info there.

I suggest you extract the original sir.exe file from your Windows cab files (if it's an MS file).. that's for Win9x/Me... or extract it from the i386 folder on your WinNT/2000 CD.

Also try Safe mode, does the problem still occur then? if not, remove all th 3rd party software you have installed... maybe one of your apps is causing the problem. I'm guessing this file is related to a program you have installed.

Empty your recycle bin..

All outta ideas. Good luck.


HOLD ON: BINGO! just found something.. you've got a virus/worm. Check out: Virus URL I found (http://home.ahnlab.com/english/aboutvirus/vinfoview.jsp?num=54)

Regards,

Kempus,

I am sure Ifalconer is right.

In the last few days I have noticed a massive increase in hacker activity. It is entirely likely that for some reason, more people out there than usual are sending out nasties of every description to b****r up our systems.

I have both a firewall and anti-virus software, (the latter is updated on line every week and sometimes more often).

May I suggest you follow suit. It doesn't cost a fortune and it has saved me many times.

Very best regards from the pilot with the cat and a pointy hat,

It certainly sounds like a virus
CLICK HERE (http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@<hidden>) for a removal tool from symantec that you download onto a floppy.

Doesn't sound like it's got anything to do with hackers - sounds like you've been visited by the Sircam e-mail worm. Or W32.Sircam.Worm@<hidden> to give it its full name - it arrives as an attachment to an email message.

Information available here...

http://securityresponse.symantec.com/avcenter/venc/data/w32.sircam.worm@<hidden>

You must still have an entry in your startup files that is attempting to launch the worm SIR32.EXE

I suggest you get the full removal tool and instructions from Symantec.

http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@<hidden>

But it seems likely that the key step that is needed is this...To edit the Autoexec.bat file:
1. Click Start, and click Run.
2. Type the following, and then click OK.

edit c:\autoexec.bat

The MS-DOS Editor opens.

3. Remove the line "@<hidden> \recycled\sirc32.exe" if it is present.

CAUTION: If you see more then one entry of "@<hidden> \recycled\sirc32.exe" in the Autoexec.bat file, it means that the computer was infected more the once. Because of this, the Run32.exe file will have been overwritten with an infected copy of the Rundll32.exe. As a result, you will not be able to rename the file to recover it as directed in the next section.


4. Click File and then click Save.
5. Exit the MS-DOS Editor