| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 97099 | 2009-02-04 06:09:00 | AutoRun virus.... | butters575 (14104) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 744787 | 2009-02-04 06:09:00 | so i ran a virus scan today and these AutoRun viruses keep popping up.. i have the AVG free edition and it says that i cant fix these because there is not enough information or something like that.... I havent noticed my computer acting differently or anything but it just worried me... Anyone know what this is??? Thanks in advance |
butters575 (14104) | ||
| 744788 | 2009-02-04 06:12:00 | Thats what it does it installs autorun.inf on devices, inc hdd's and flash drives. And executes whatever Get rid of AVG and get Avast Then scan whatever is infected Or get trojan remover below for now, update it then scan whatever Then select all options under utilities Or post a hijackthis log, so we can see whats in it |
Speedy Gonzales (78) | ||
| 744789 | 2009-02-04 06:42:00 | in this thread (www.pressf1.co.nz) I posted manual removal instructions for the many autorun variants But If speedies method works | beama (111) | ||
| 744790 | 2009-02-04 21:16:00 | Just check whether you see any autorun.inf files on your USB drive... The annoying thing is when I use portableapps it creates an autorun.inf so the menu can pop up... But one time it was deleted by an anti-virus program saying it's a virus (which is not because I wrote it!!!) Alright, back to the topic. I had the virus on XP before, and it forced me to reinstall the system. Right-click on the hard drives and see whether there is a menu item "Auto" in bold. You're probably done if you see that, because chances are you've activated it. Otherwise, search your system for tel.xls.exe (it will disguise itself as an excel file when it's actually an application), SockA.exe, FileKan.exe, and see whether you can bring the hidden files up to display. Trust me, these are the REAL symptoms when you're infected by the real Autorun virus. Kaspersky can remove them, at the cost of (something I'd forgotten, but it's not money). |
LynX (14542) | ||
| 744791 | 2009-02-04 21:17:00 | Just check whether you see any autorun . inf files on your USB drive . . . The annoying thing is when I use portableapps it creates an autorun . inf so the menu can pop up . . . But one time it was deleted by an anti-virus program saying it's a virus (which is not because I wrote it!!!) Alright, back to the topic . I had the virus on XP before, and it forced me to reinstall the system . Right-click on the hard drives and see whether there is a menu item "Auto" in bold . You're probably done if you see that, because chances are you've activated it . Otherwise, search your system for tel . xls . exe (it will disguise itself as an excel file when it's actually an application), SockA . exe, FileKan . exe, and see whether you can bring the hidden files up to display . Trust me, these are the REAL symptoms when you're infected by the real Autorun virus . Kaspersky can remove them, at the cost of (something I'd forgotten, but it's not money) . |
LynX (14542) | ||
| 744792 | 2009-02-05 07:01:00 | so i ran the avast virus scan thing and there were like 15 infected files . . . the program suggested that i "move them to the chest" so thas what i did . . . . i guess that got rid of them??? or no . . . |
butters575 (14104) | ||
| 744793 | 2009-02-05 07:06:00 | Should be safe for now. Disable system restore and do another scan (scan the whole hdd, or hdd's), if you have more than 1 Did you get trojan remover and do a scan? |
Speedy Gonzales (78) | ||
| 744794 | 2009-02-05 08:18:00 | Otherwise, search your system for tel.xls.exe (it will disguise itself as an excel file when it's actually an application), SockA.exe, FileKan.exe, . Thats SOME of the variants there are many more. If you use windows aka explorer to track this virus it will run the autorun.inf, thats why you do it in a command line environment. time to brush up on some dos commands guys. and speedies method does work. in my experience this virus and it variants is nothing more than a pest, its only purpose that I can see is to deny access to usb drives. Best way to find out if you have it is to run this command from a comand prompt " type autorun.inf" anything suspect follow instructions given by speedie or have a look at my manual intructions |
beama (111) | ||
| 744795 | 2009-02-09 17:48:00 | Should be safe for now. Disable system restore and do another scan (scan the whole hdd, or hdd's), if you have more than 1 Did you get trojan remover and do a scan? i guess i already had the trojan remover cuz it told me my trial was expired or somethin like that..... and ill do the disable system restore thing after i get outta class.... |
butters575 (14104) | ||
| 744796 | 2009-02-09 22:27:00 | Usually Flash Disinfector does the job nicely... | Blam (54) | ||
| 1 | |||||