Avast WEBforum

Other => Viruses and worms => Topic started by: Ken M. on January 19, 2010, 12:10:01 AM

Title: BV:AutoRun-S [WRM]?
Post by: Ken M. on January 19, 2010, 12:10:01 AM

When I put in my J drive, Avast On-Scanner protection pops up a warning dialogue stating it has detected a worm/virus. 1/18/2010 5:02:12 PM   SYSTEM   1236   Sign of "BV:AutoRun-S [Wrm]" has been found in "J:\autorun.inf" file. When I  choose delete, I get a dialogue that says "avast! Access Denied, the file name J:\autorun.inf could not be found. The same goes for when I try to move to chest. I then removed the J drive, and ran a thorough scan with no results. I then put the J drive back with no warnings at all. I also ran a scan on the J drive and got nothing. After restarting my computer, I got the same warning message again. I'm not technical at all, and I'm only 16 so mind any spelling mistakes :-\ Any help would be appreciated.

Title: Re: BV:AutoRun-S [WRM]?
Post by: Pondus on January 19, 2010, 01:08:23 AM

Try this

Flash Disinfector – free autorun.inf trojans removal tool
http://www.myantispyware.com/2009/01/08/flash-disinfector-free-autoruninf-trojans-removal-tool/

How to remove trojans that uses autorun.inf file
http://www.myantispyware.com/2008/05/26/how-to-remove-trojans-that-uses-autoruninf-file/

How to disable/enable the autorun feature to prevent malware from spreading
http://www.myantispyware.com/2008/06/02/how-to-disable-the-autorun-feature-to-prevent-malware-from-spreading/

How to remove Flash Disinfector protection (autorun.inf folder)
http://www.myantispyware.com/2009/01/13/how-to-remove-flash-disinfector-protection-autoruninf-folder/

Title: Re: BV:AutoRun-S [WRM]?
Post by: Ken M. on January 19, 2010, 02:01:07 AM

While trying to install Flash Disinfector, Windows Dialogue appears saying the program failed to install correctly. It had an option to install using recommended setting, which I used, but nothing happened. I'm using a Windows 7 64-bit OS if that may be the problem.

Title: Re: BV:AutoRun-S [WRM]?
Post by: polonus on January 19, 2010, 02:16:55 AM

Hi

On 64bit use free McAfee USB-Drive AV 64 bit
http://www.fileguru.com/USB-Drive-AntiVirus/download

polonus

Checked with DrWeb URL checker:
Checking: http://scripts.chitika.net/eminimalls/amm.js
File size: 16.31 KB
File MD5: baa1405b3eacb5e1a40dc71cba95d991

http://scripts.chitika.net/eminimalls/amm.js - Ok



Checking: http://ctxt.tribalfusion.com/ctxt/textlinks.js
File size: 822 bytes
File MD5: 04159df3ea0e356e4813b15abac96a20

http://ctxt.tribalfusion.com/ctxt/textlinks.js - Ok



Checking: http://pagead2.googlesyndication.com/pagead/show_ads.js
File size: 32.08 KB
File MD5: e6ddd6db089de0b4377f39ee2048015b

http://pagead2.googlesyndication.com/pagead/show_ads.js - Ok

Checking: http://www.fileguru.com/USB-Drive-AntiVirus/download
Engine version: 5.0.1.12222
Total virus-finding records: 946671
File size: 32.73 KB
File MD5: 755118fdf450f4626c1a90d8e0a42f24

http://www.fileguru.com/USB-Drive-AntiVirus/download - archive HTML
>http://www.fileguru.com/USB-Drive-AntiVirus/download/Script.0 - Ok
>http://www.fileguru.com/USB-Drive-AntiVirus/download/Script.1 - Ok
>http://www.fileguru.com/USB-Drive-AntiVirus/download/Script.2 - Ok
>http://www.fileguru.com/USB-Drive-AntiVirus/download/Script.3 - Ok
>http://www.fileguru.com/USB-Drive-AntiVirus/download/Script.4 - Ok
http://www.fileguru.com/USB-Drive-AntiVirus/download - Ok

D

Title: Re: BV:AutoRun-S [WRM]?
Post by: Ken M. on January 19, 2010, 02:29:57 AM

As recommended, I used the McAfee USB-Drive AV 64 bit. No threats were detected on my J drive, and the avast warning never appeared either like it did before. I'm leaning toward a false positive right now, unless it already got on my computer somewhere. Doing another thorough scan just to be safe. Thanks for the help.