Results 1 to 4 of 4

Thread: HELP! HELP! SirC32.EXE

  1. #1

    Thread Starter
    Banned
    Join Date
    Feb 2001
    Location
    Back to sh*tland
    Posts
    294

    Exclamation HELP! HELP! SirC32.EXE

    I'm very tired and I have to "wake up" in 5 hours to work.

    I dont have energies to tell the whole story but here is some of it.

    the public computer I'm using is very crappy.
    It has windows98 and norton antivirus
    it does not have VB

    Ever since I started using this computer I saw it was sending information to the outiside without me doing anything.(Also, it crashed too many times, more than useual) So, I remember that **** that caught grc.com and suspected a irus. So I runed nortn antivirus and saw the virus definitins were ONE YEAR old. I run live update.
    I scan the system for virus: 58 files infected. some of them were repaired and others quaritined. There was 6 different virus and some of them had Sircam or sirc32 or something.
    It found a file SirC32.exe in C:\recycled which was quaritined. I believe it was that bstard which was ****ing all the system. quaritine with it.. sock32.dll or something like that was too infected but it was repaired.

    All virus have gone but I still have a problem. Somehow, all files of type application need sirc32.exe to run....
    so now i cant run anything except if I open a file different from application type. that's i'm writting this.

    I'm running out of words... i'm ****ing tired of this.

    I cant remove the application type from the folders options window. I saw some ini files searching for it but nothing. So I must change in the regitry, i think. but i dont have vb here and I still dont know enough of C to do something.

    please any help would be very apreciated.
    make the questions you need.

  2. #2
    PowerPoster
    Join Date
    Jul 1999
    Posts
    5,923
    I got a McAfee Despatch newsletter about that today, here is some info
    — W32/SirCam@mm (Sir Cam Virus)—

    Dear Chris:

    McAfee.com has seen a large and growing number of consumer computers infected with W32/SirCam@MM. This is a HIGH RISK VIRUS FOR CONSUMERS. The infected email can come from addresses that you recognize. Attached is a file with two different extensions. The file name itself varies.

    The email message can appear as follows:

    Subject: [filename (random)]
    Body: [content varies]

    ---ENGLISH VERSION---

    Hi! How are you?

    I send you this file in order to have your advice
    or I hope you can help me with this file that I send
    or I hope you like the file that I sendo you
    or This is the file with the information that you ask for

    See you later. Thanks

    ---SPANISH VERSION---

    Hola como estas ?

    Te mando este archivo para que me des tu punto
    de vista
    or Espero me puedas ayudar con el archivo
    que te mando
    or Espero te guste este archivo que te mando
    or Este es el archivo con la información que
    me pediste

    Nos vemos pronto, gracias.

    The virus searches for .GIF, .JPG, .JPEG, .MPEG, .MOV, .MPG, .PDF, .PNG, .PS, and .ZIP files in the MY DOCUMENTS folder and attempts to send copies of these documents to email recipients found in the Windows Address Book and addresses found in cached files.

    Click Here for detection and removal instructions.
    McAfee.com VirusScan Online and Clinic subscribers:
    If you don't have ActiveShield installed and updated, you are not protected from this virus. Click here to download ActiveShield.
    Retail VirusScan Users: Version 4.0.70 and above with DAT file 4148 will detect and remove this virus.
    Click Here to download the latest DAT files.
    so far, two people have sent me the virus, without them knowing. If you follow the link, there is a section on manual removal

  3. #3

    Thread Starter
    Banned
    Join Date
    Feb 2001
    Location
    Back to sh*tland
    Posts
    294

    Smile thank you

    it seems evry ting is alright now. im Im so tired I even didnt remember the Dos prompt. I just used a open dialog box to copy, delete and move filess.

    everything is working much faster than before. seems new.

    Im always very careful at home and I never thougt I would have to fix a public computer. dumb managers

    now I can sleep. 4 hours until work phew.

    thanks once more chris

  4. #4
    PowerPoster
    Join Date
    Jul 1999
    Posts
    5,923
    have good dreams, David...

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  



Click Here to Expand Forum to Full Width