INF:Autorun-C [trj]

[viviee]

HEY!

Since last night I have been pulling my hair out because avast! keeps warning me that there is a virus been detected :INF:Autorun-C [trj]. I have many times clicked 'Delete' and 'Move to Chest' as recommended, but it would keep popping up again and again after a minute or so.

I have read Menippos' forum and have followed Tech's advice, but nothing has changed. In fact, my computer seems to be worse for it is currently frozen and will not open any program, except when avast! warns me about the virus. The warnings come less frequently now, but I think that the virus has almost killed my computer.

I am currently on my other computer, and I desperately need help. HELP?!

Thanks.

[oldman]

Welcome to the forum.

I'm not sure of all that you have tried, but to get you started. Is there anyway you can download  superantispyware and run it on the other computer? Maybe copy it to a cd (not flash) and install it on the other one. This may help to get the computer at least usable again.

Download  superantispyware

First update SAS Then

Under Configuration and Preferences, click the Preferences button.
Then click the Scanning Control tab.

Under Scanner Options make sure the following are checked
- Close browsers before scanning
- Scan for tracking cookies
- Terminate memory threats before quaranine.

 leave the others unchecked.

Return to the main page by clicking close on that screen. On the main screen, under Scan for Harmful Software click Scan your computer. On the left check C:\Fixed Drive.(and other fixed drives)
Under Complete Scan, choose Perform Complete Scan.
· Click Next to start the scan.

When the scan is done, quarentine everything found . Reboot if asked. You can post the log in your next reply if you wish.

[viviee]

Thanks... I'll try your suggestions! I think it would take a while... *sigh*

Thanks again!

[oldman]

You're welcome. If you can get the computer useable again, you should also post a hijackthis log in your next post. Run hijackthis after the SAS scan.

Click here to download HJTsetup.exe

• Save HJTsetup.exe to your desktop.
• Doubleclick on the HJTsetup.exe icon on your desktop.
• By default it will install to C:\Program Files\Hijack This.
• Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
  
• Put a check by Create a desktop icon then click Next again.
  
• Continue to follow the rest of the prompts from there.
• At the final dialogue box click Finish and it will launch Hijack This.
  
• Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
  
• Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
• Come back here to this thread and Paste the log in your next reply.
• DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
  

[viviee]

Well, I'm currently doing scans on both SUPERAntiSpyware and AVG Anti-Spyware. I've also cleaned up my temporary files using Clean Up! and cleaned of 4.8 MB of my disk space. avast! is still bugging me with the detection messages and I am continuing to click on the 'Move to Chest' button.

I think I did something bad... I didn't have a CD so I put SUPERAntiSpyware on my USB and transferred it to the other computer. Now the USB stick has got the virus too.

Sorry, I am not a genius at computers... *sigh*

[oldman]

That's why I said not flash. But keep the scan going and don't put the usb in anything else.

[oldman]

Can you post the names of the files and locations that avast is detecting?

Another piece of info that may be useful is the contents of the autorun.inf

You will probably find it at the root of c:

Locate it and open it with notepad, copy and paste the contents in your next reply. In windows explorer click on c: in the right hand panel, autorun.inf should be in the left panel. While there see if there is a file called setup.exe.

ps don't worry about the infected flash, it can be cleaned with the computer.    Just don't use it in a clean computer.

[viviee]

Hello.

Thanks a lot for your help! Sorry I didn't get a chance to reply but I seemed to have gotten rid of the virus. But I wasn't able to find the location and contents of the viruses so I'm so sorry! 

Well, since I am not a genius at computers, I had to get a professional to look at the problem Luckily, he's a friend so it was all good! My computer is still lagging a bit but at least it is up and running! *sigh*

Still, thanks a lot for your help! You are a pro!  Keep up the good work!

Bye.

[oldman]

Glad you got it sorted out. Come back any time. 

[michaelong]

[AutoRun]
open=ntdelect.com
;shell\open=Open(&O)
shell\open\Command=ntdelect.com
shell\open\Default=1
;shell\explore=Manager(&X)
shell\explore\Command=ntdelect.com

pls help, as i'm still stuck with this virus.

i can only stopped it by disable my avast anti virus.

i'm now operating without av at all.

[Lisandro]

michaelong, you're posting twice the same.
Just double the help effort.
Follow just one thread.
http://forum.avast.com/index.php?topic=31565