Deleted restore log files after running SpyBot

[papariccardo]

Help this silly kiwi please! Now whenever I try to open anything, I get a scanning solitaire ink window, nothing found. All icons are blanks except 'My Comp', 'recycle bin' and basic folders. Running XP Media Centre.

The machine is an HP bought new 3yrs ago today, with built-in system restore - no CDs were ever provided. ( I HATE suppliers doing this).

Is there a simple fix, or is it time to spring for a new micro$oft licence, to repair a legitamate issue on my childs PC? The warranty expires today, but I don't see them doing anything given I created the problem using 'third party software'. It's currently almost 4pm in NZ.

Thanks everybuddy!

 

[papariccardo]

Old unfaithful, SirC has come-a-callin'...

Bugger. Anyone know of a simple fix for the SirC virus? Symantec have a good one, but too late - I've tried to open it before understanding it, so the repair is now corrupt. I also tried regedit changes, but I'm no techie. Off to the Geeks tomorrow.

 

[Tom.K]

Now whenever I try to open anything, I get a scanning solitaire ink window, nothing found.

You mean, Spybot File Scanner Window?
Related Thread about it:
http://forums.spybot.info/showthread.php?t=30678

About SirC:
You've probably already used symantec's fix: http://www.symantec.com/security_response/writeup.jsp?docid=2001-072013-2927-99
Here's sophos's removal utility: http://downloads.sophos.com/tools/rmsirc.bat
(to download it, right-click > "Save Target (or Link in Firefox) as...")

SirC Related Threads:
http://pressf1.pcworld.co.nz/showthread.php?t=10534
http://pressf1.pcworld.co.nz/showthread.php?t=11061

 

[papariccardo]

Thanks, Tom!

Although it's now 0130hrs in NZ, I will play with those links after breakfast. Thankyou, thank you! It has been a long day in safe mode, with little outcome & no resolve.

I appreciate you taking the time to answer. Unlike many n00bs here, I WILL post results and thanks as & when they are due!

 

[tashi]

Hello papariccardo,

Symantec have a good one, but too late - I've tried to open it before understanding it, so the repair is now corrupt. I also tried regedit changes, but I'm no techie. Off to the Geeks tomorrow.

Although it's now 0130hrs in NZ, I will play with those links after breakfast.

The links given regarding SirC recommend disabling system restore which would mean losing the restore point before an analysis has been made, plus you have already tried regedit changes which caused problems.

I'd suggest starting a topic in our Malware Removal Forum after following instructions here: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) so someone can take a look at the system. If you haven't taken the computer to Geeks already.

If you do start a new topic please provide a link back to this thread. If you cannot produce a HJT log please make note of the situation and wait for a response from one of our helpers.

Do NOT run 'FIXES' before helpers have analyzed the HJT log

Best regards.

 

[tashi]

Malware forum topic: http://forums.spybot.info/showthread.php?t=52604