Select the product you need help with
- Internet Explorer
- Windows Phone
- More products
You cannot start programs when your computer is infected with the SirCam virus
Article ID: 311446 - View products that this article applies to.
This article was previously published under Q311446
If you click Yes, download the updated Setup files (Recommended) in the Get Updated Setup Files dialog box while the Setup program is running, you may receive the following message in the Upgrade report:
If you click Full Report, you receive the following message:
Setup found some blocking issues. You must address these issues before you can continue upgrading you computer. For more information, click Full Report.
Bad System Configuration
If you click No, skip this step and continue installing Windows in the Get Updated Setup Files dialog box during Setup, you may experience any one of the following symptoms:
Setup detected an invalid system configuration, which is typically caused by a virus. See KB Article Q311446 and follow the instructions there.
The W32.Sircam.Worm@mm worm virus can cause this issue. The W32/Sircam virus spreads itself through e-mail messages or unprotected network file shares and can reveal or delete information on your computer. To verify that your computer is infected with this kind of virus:
Microsoft does not provide software that can detect or remove computer viruses. If you suspect or confirm that your computer is infected with a virus, obtain current antivirus software. For a list of antivirus software manufacturers, click the following article number to see the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/49500/ )List of Antivirus Software Vendors
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/322756/ )How to back up and restore the registry in Windows
How to try to prevent the virus from runningImportant The following procedure only prevents the virus from running so that you can run an updated antivirus program or W32/Sircam virusremoval tool. While you work to resolve this issue, physically disconnect all your infected computers from the Internet or any other network. For detailed instructions about how to recover an infected computer, please see the following Carnegie Mellon Web site:
The removal of the Sirc32.exe virus without modification of the HKEY_CLASSES_ROOT\Exefile\Shell\Open\Command key will invalidate every executable file on the computer because, according to this line in the registry, the executable files are to be run as a command line parameter to the Sirc32.exe file which no longer exists. This prompts the "Windows cannot find" message when you try to start the executable file.
Additional information about how to remove W32/Sircam virusFor additional information about how to correctly remove the W32/Sircam virus, please see the following third-party Web sites:
Availability of W32.Sircam.Worm@mm Removal toolsFor information about tools you can use to correctly remove the W32/Sircam virus, please see the following third-party Web sites:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FSIRCAM%2EA&VSect=SnFor more information about the W32/Sircam virus and additional antivirus vendor references, please view the "CA-2001-22 W32/Sircam Malicious Code" CERT Advisory at the following Carnegie Mellon Web site:
http://www.cert.org/advisories/CA-2001-22.htmlFor more information, click the following article number to view the article in the Microsoft Knowledge Base:
306913Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
(http://support.microsoft.com/kb/306913/ )Error message caused by Sircam32 virus when you start a program