Author Topic: HowTo Kill this autorun virus ? Avast don't see him.  (Read 6114 times)

0 Members and 1 Guest are viewing this topic.

winbinar

  • Guest
HowTo Kill this autorun virus ? Avast don't see him.
« on: April 05, 2010, 09:16:03 PM »
Need rename attached file to zip  :-\
« Last Edit: April 06, 2010, 08:28:41 PM by winbinar »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: HowTo Kill this autorun virus ? Avast don't see him.
« Reply #1 on: April 05, 2010, 09:26:33 PM »
There is an EXE file within that zip file - what does it do ?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89426
  • No support PMs thanks
Re: HowTo Kill this autorun virus ? Avast don't see him.
« Reply #2 on: April 05, 2010, 09:27:24 PM »
Please remove the attachment from your post, this isn't a malware distribution site.

Send the sample to avast directly.
avast 5.0 - Send the sample to avast as a Undetected Malware:
Open the chest and right click in the Chest and Add, navigate to where you have the sample and add it to the chest (see image). Once in the chest, right click on the file and select 'Submit to virus lab...' complete the form and submit, the file will be uploaded during the next update.

OR
 
Send the sample to virus (at) avast (dot) com zipped and password protected with the password in email body, a link to this topic might help and undetected malware in the subject.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Jtaylor83

  • Guest
Re: HowTo Kill this autorun virus ? Avast don't see him.
« Reply #3 on: April 05, 2010, 09:29:13 PM »
I suggest you try

Autorun Eater or Panda USB Vaccine.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37649
  • F-Secure user

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89426
  • No support PMs thanks
Re: HowTo Kill this autorun virus ? Avast don't see him.
« Reply #5 on: April 05, 2010, 09:38:57 PM »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

psw

  • Guest
Re: HowTo Kill this autorun virus ? Avast don't see him.
« Reply #6 on: April 05, 2010, 10:11:14 PM »
There is an EXE file within that zip file - what does it do ?

This EXE copy itself into %USERPROFILE%\csrss.exe and fill  system autorun key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] with data item like "Taskman"="C:\\Documents and Settings\\psw\\csrss.exe"