GAURAV VIRUS - Info Wanted

This is a discussion on GAURAV VIRUS - Info Wanted within the Windows Programming forums, part of the Platform Specific Boards category; Hi, I recently received an email requesting advice on the file 'GAURAV.DOC.pif'. Obviously, I suspected it to be a virus, ...

  1. #1
    andy668
    Guest

    GAURAV VIRUS - Info Wanted

    Hi,

    I recently received an email requesting advice on the file 'GAURAV.DOC.pif'. Obviously, I suspected it to be a virus, but curiousity got the better of me (and my own stupidity). I saved the file and attempted to view the contents with WordPad (I was looking for textual clues). However, I think something went wrong & the file was executed, although I don't understand how.

    Here's what I think it may have done, but I'm not 100% sure. It placed an executable in the Recycled bin called 'SirC32.exe', and modified the 'HKEY_CLASSES_ROOT' area of the registry to point exe files at SirC32. I noticed that Windows Explorer was behaving unpredictably - launching it would invoke multiple instances. I've since corrected the registry & removed all copies suspicious files, and Windows seems normal.

    Does anyone know anything about this [potential] virus? Can someone confirm that 'SirC32.exe' is NOT a legitimate Windows file & that my corrective actions were correct? What are the symptoms of GAURAV? Does it corrupt data/files? What lasting effects may I suffer from?

    Any info greatly appreciated. Thanks.

    Andy

  2. #2
    Hamster without a wheel iain's Avatar
    Join Date
    Aug 2001
    Posts
    1,385
    the virus is also known as SirCam, it is a worm and takes on a random name and extension to fool recipients. The virus screws up various system settings including the recycle bin and the system registry. More information on the virus, detecting and removing it can be found at http://www.protectorplus.com/virus_i...rms/sircam.htm
    Monday - what a way to spend a seventh of your life

  3. #3
    andy668
    Guest
    Thanks.

    Found more info about SirCam on:

    http://www.viruslist.com/eng/virusli...00130000100088

Popular pages Recent additions subscribe to a feed

Similar Threads

  1. My virus scan
    By confuted in forum A Brief History of Cprogramming.com
    Replies: 10
    Last Post: 06-18-2003, 09:33 AM
  2. Best Anti Virus Software...?
    By gardenair in forum Tech Board
    Replies: 4
    Last Post: 05-01-2003, 11:17 PM
  3. sorting output on student info program
    By indigo0086 in forum C++ Programming
    Replies: 2
    Last Post: 11-05-2002, 10:29 AM
  4. where to find info?
    By nas in forum C Programming
    Replies: 2
    Last Post: 06-24-2002, 04:35 AM
  5. Replies: 3
    Last Post: 12-06-2001, 04:30 AM

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21