sirc32.exe???

[KeyTech]

Hi, I have a user who got an email in and it was a ACAD drawing file, he saved the file onto the server and then went to open it....it froze his machine totally. Had to restart. Then tried to launch Acad and got an error, windows cannot find sirc32.exe which is required to launch applications. This error occurs with all apps, inc Word or Excel etc, but if he browses for a word.doc for example, Word will start and open the doc no probs...
does anyone know what is goin on here, I did a search on my PC for the file and didnt find it, also searched the web, nothing, and there is no mention of it as a virus...????
I thought it might have something to do with CAD seeing how it was a cad file that started it all, but could just be coinsidence.....
help please!!!!! Jay~

"I have to think of a funny footer to
put in here!!!???"

~KeyTech

 

[Empeethree]

It is related to the Sircam virus that is going around.. probably had nothing to do with the cad file.

although I know you can find the info, here is a quick link for you..

http://vil.nai.com/vil/virusSummary.asp?virus_k=99141

hth
Rob

 

[KeyTech]

yea I found out it was a virus and removed it manually, one thing that you have to do while removing the virus is to rename regedit.exe to regedit.com, as the virus stops any .exe files to run, once I figured that out I was away!!!!
thanks anyway. Jay~

"I have to think of a funny footer to
put in here!!!???"

~KeyTech

 

[SkaterBoy]

Hey
I did all the steps to deleting the files manually in the registry, but when i searched for Run32 i found a whole lot of other files i KNOW are associated with the virus, their in the

HKEY_USERS\Corey\Software\Microsoft\Windows\CurrentVersionExplorer\Doc Find Spec MRU
Thanks a lot

 

[KeyTech]

these are actually files that you have searched for in your Find->Files or Folders list!!!!
If you go to Start->Find->Files of Folders, and pull down the list of recent searches, you will see what you have searched for, and they will match the ones in the reg keys you found!!! if you want you can delete the keys, which will remove the list from the recent searches in Find (but I wouldnt advise editing the reg unless you know what you are doing!!)
dont worry they are harmless!!!! Jay~

"I have to think of a funny footer to
put in here!!!???"

~KeyTech