Author Topic: autorun.exe  (Read 2538 times)

0 Members and 1 Guest are viewing this topic.

Florianika

  • Guest
autorun.exe
« on: January 03, 2008, 10:00:47 AM »
in my flash I have two files: autorun.inf and autorun.exe, they are hidden and I coulden't remove them! I think my computer is infected with a virus! How can I remove it becouse my avast cant detect it?

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67183
Re: autorun.exe
« Reply #1 on: January 03, 2008, 12:36:49 PM »
Are you showing hidden files and folders?
To unhide them, open any folder and go to Tools >folder options > View, then scroll down to where it says 'Hidden files and folders' and then check/tick the 'Show hidden files and folders'.
Then again try and go into the _restore folder and clear the temp folder.

Tutorial here: http://www.bleepingcomputer.com/tutorials/tutorial62.html

Please disable 'Hide protected operating system files' and enable 'View Hidden Files and Folders'

After that, can you, please, send the samples to virus@avast.com ?
You can zip and password the files... Inform a link to this thread and the password used.
You can send the files to Chest and, from there, resend to Alwil for analysis.
Thanks.

To get clean, I suggest:

1. Use AVG Antispyware; SUPERantispyware and/or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
2. Use on-line scanners:
Kaspersky (very good detection rates)
ESET NOD32
Trendmicro housecall
AVGas (does not necessary if you have AVG antispyware installed)
F-Secure
BitDefender (free removal of the malware)
HitmanPro (multiply scanners)
The best things in life are free.

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: autorun.exe
« Reply #2 on: January 03, 2008, 02:32:24 PM »
Click on the link below and down load the following file and save it to your desk top.

queerymountpoints.bat  

Plug in your usb device and double click the file you just downloaded. A notepad file named mountpoints.txt will appear on your desktop when it has finished. Please post the contents of that file in your next reply.

http://cid-32d8666f4048075b.skydrive.live.com/browse.aspx/Malware%20files