I need help a file called .avcrc

Anyone ever heard of it? It started showing up on my pc at work running windows xp. I did a search and there are 2341 files on my comp with that name. It is replicating itself very rapidly and has attached to all my programs, run commands, etc. I went online but could not find anything about it.
Any help would be greatly appreciated.
Thanks in advance.
_____________________________________________
Be Cool
K_OS

[Edited on 11-3-2003 by K_OS]

what exactly are you doing when you notice it? and where is it replicating? system folders I'm assuming. but are you doing anything in particular when you can notice it? do you see an unfamiliar process running?
google turned out a bible group in California, the Bible Groups are on your computer!! just kidding.
sounds like a worm, get an anti virus program to take care of it. you can try Nortons, but I didnt see anything on their site about it

[Edited on 11-3-2003 by Grommer]

[Edited on 11-3-2003 by Grommer]

I thought that was funny too when I checked google .
I thought oh no I am being invaded by a California Bible group.
I'm running an up to date Norton Anti- virus and it isn't picking it up.
Using Hackman dissasembler this is the info I can extract from it:

AVCRCDB-1.04
Anatomy.exe Calc.exe Compare.exe Crypt.exe CStats.exe Dates.exe Prop.exe Sysinfo.exe Tables.exe Viewer.exe HackPM.exe Updater.exe isreg32.dll

I went to start, all programs, and went to photoshop folder and there it was .avcrc. I tried to delete it and I checked another folder and it was there too.
So I did a search and found 2341 copies. It is in every folder in my computer.
I can't see it running in any of my processes unless it is running under a normal name like explorer, etc.

encrpyt the #er render it useless

I can't find out where it is originating from??

take thetower block to a comp place if you cant do it altho if u have illeagle files on it they will find out

look in your startup options and see if there's something odd in there. Sounds like a pretty nasty worm for sure. If you see something odd in your startup programs, or processes that are running disable it. Downloaded any pics or mp3's lately?

or vids etc etc could be of anything

The only thing that I have ever downloaded onto it is Seti@home, I use either the mac or linux comps for all downloads. It acts like it came in on its own, which I have never heard of a virus doing.
I may have to take it somewhere...no worries, nothing illegal on it.
I tried to contact symantec but they wanted $29.95 to speak to me. What a rip.
The only odd thing that I can find is that it says I have 4 Internet explorers open.

could be any new disks or sumthing like that def sundsa like worm orvirus just pray it dosnt eraze anything

do you actually have 4 IE windows open? if not you can close the other ones as it probably is part of this worm. If you want a no hassle answer, I'd say reformat the drive, as you will likely spend hours on the phone with Symantec. Throw XP back on there, do a thorough reformat and you're good to go. You might be able to backup your much needed files without actually copying the virus. good luck

[Edited on 11-3-2003 by Grommer]

if u can locae were u think it originated frm reformating si a goodi dea ifyour burn on to a cd all theinportant stuff and have back up disks andmaybe codes to re install ?

sorry about bad typing my keyboard is all messedup

Are you sure that's the file name - or is it just the extension?

You could go to Symantec site and scan for viruses -
Try this LINK

That will at least allow you to asses if and what virus you have. There are a few trojans going around at the moment that you may have been hit with. If it's your work PC like you mentioned is it your employers PC? Is there a help desk you can call? I'd spend that $29 on first purchasing antivirus software.

Ok I think I have got it taken care of now. I had to reboot in linux and erase all files named .avcrc. As of now it hasn't resurfaced.
Thanks for all the ideas. I don't know if this is a new virus or what but I was unable to locate it on symantec. When I checked the properties of the file it was named .avcrc thats it.
It could have been a worm or a trojan...I don't know but I do know I couldn't delete it from Windows. It said can't find something...unable to delete.

By the way did I mention I switched to Mac at home.
OS X is pretty nice. Safari could be the best web browser out there. It was kinda embarrassing when my little 350 mhz imac with 512 ram was destroying my 1.4 gighz 512 ram pc. Now the PC is for my daughters games only.
Again thanks everyone, if it comes back again I'll let ya know.
P.S. Bob, sad but true I am the help desk. LOL...Small newspaper, usually I can correct 99% of the problems and I am running Norton on all the comps here, PC's and Macs, Is there a better antivirus software?
thanks everyone
_____________________________________________
Be Cool
K_OS

For all practical purposes I am also the help desk.
I like Norton myself. I have used CA's Inoculan (because of a partnership with CA) - but that was 2nd rate, imho.
None the less, an odd occurance you had there K_OS.
I have a linux PC (Redhat 8) sitting next to me and want to get a Mac soon.

Well it came back on April 14, I have again deleted it. I recieved a few emails from people that are having the same problem. I have searched the web trying to locate info on the file but I am unable to find anything.
It certainly acts like a worm, but I can't seem to find its source. It seems to cycle about every 27, or 28 days.
If anyone has any more info on it, please tell me.
Thanks!!
_____________________________________________
Be Cool
K_OS

did they also have seti, those that has simular problems?

I had SETI, I removed it when I deleted the files this last time. I don't know if it was the cause or not, I will have to wait and see if it comes back.
_____________________________________________
Be Cool
K_OS