Forum Home
Press F1
 
Thread ID: 85852 2007-12-24 07:26:00 Usb autorun.inf file problem!!! JOYBEBA6679 (10686) Press F1
Post ID Timestamp Content User
624248 2007-12-24 08:47:00 I know that my friend, what im trying to say is that this menu program has an interface like the U3 one but is not U3 nor related to it, but the PNY drive worked fine, the one working wrong is the HD, this happened after I plugged it in my girlfriends laptop wich I assume is infected.

But I will run the prog you gave me, with the HD plugged to see if it works, thanks for it :)
JOYBEBA6679 (10686)
624249 2007-12-24 08:55:00 No prob, that maybe the only reason, why that autorun.inf changed. Speedy Gonzales (78)
624250 2007-12-24 15:03:00 Ok, I run the tool you gave me with the HD plugged but it found nothing on the computer, maybe cuz the problem is inside the HD and not the computer. How do I make this tool to scan only the HD or is it not possible, also will I have to erase my hd in order to fix this?


On another note and in oder to not make another thread, Im having a strange problem with a Gateway MX6216, since some time ago, I noticed that on random occasions when I turn it on it will display no backlight at all but after a rebot it starts fine, and also after it has booted and the desktop screen has come up the laptop goes to a black screen like for 2 seconds and then returns to normal, is it a virus or worm? thanks!
JOYBEBA6679 (10686)
624251 2007-12-24 15:29:00 Ok, I scan the computer with the fxrajump.exe tool after I plugged in the HD and winrar stoped working, so I assumed it would be infected but the tool found nothing, Is there a way that I can scan only the Maxtor HD cuz I believe the problem is inside it not on the pc, it has to be since after a system restore, everything comes back to normal, winrar works again untill I plug the HD in again... JOYBEBA6679 (10686)
624252 2007-12-24 18:58:00 Well, the hdd will have to be connected somehow, either with USB or connected to an IDE cable inside the case.

If its an IDE hdd.
Speedy Gonzales (78)
624253 2007-12-25 01:54:00 right click on the offending autorun.inf choose "open with" select notepad

copy and paste the the text here one of us will be able to see if its one of those pesky inf virus's. I deal with these,sometimes on a daily basis.

Tell me, check running tasks do you have a task called "kill" that may appear as a excell spreed sheet, thats the most common one in my experance
beama (111)
624254 2007-12-25 05:47:00 Ok I scanned the HD with avast it found this: win32:Neptunia-BR [trj] and win32:Agent-ONH [trj]. I deleted them cuz avast said I could delete them, but the damn thing is still doing it, thou I didnt scan the pc, maybe it got infected again, this time from PC to HD.

Anything on those trojans my friends?
JOYBEBA6679 (10686)
624255 2007-12-25 06:15:00 right click on the offending autorun.inf choose "open with" select notepad

copy and paste the the text here one of us will be able to see if its one of those pesky inf virus's. I deal with these,sometimes on a daily basis.

Tell me, check running tasks do you have a task called "kill" that may appear as a excell spreed sheet, thats the most common one in my experance

Problem with that my friend is that search only comes with 1 autorun.inf file and is not the one with the 154 KB size, the one it has is only 1KB and it says only to run setup.exe.

Avast said that the trojans were on F:\System Volume Information\_restore and some numbers but when I try to search there it says that path is not accesible and acces is denied.
JOYBEBA6679 (10686)
624256 2007-12-25 07:13:00 System Volume Information is the folder, for system restore.

You'll have to disable system restore.

And hopefully it'll remove these trojans

You wont be able to get into this folder, until u boot into safe mode, and add yourself to it.

After disabling system restore.
Speedy Gonzales (78)
624257 2007-12-25 07:28:00 Ok disable system restore of the PC? How can I do this, and also if I format the HD and then restore my pc to an earlier time, will it fix the prob? JOYBEBA6679 (10686)
1 2 3