please help! autorun.inf

[nitsana]

Hi

my avast found

file name: d:/autorun.inf
malware name  BV:AutoRun-S (WM)
VPS Version: 101024-1,10/24/2010

and it says it cant process it - i have tried deleting and tried moving to the chest - will not do either.

I dont know how to find the file to scan it again in Jotti as suggested

Does anyone have advice as to what to do in this case?


Thanks very much

[SafeSurf]

Hello nitsana and welcome to the forum. 

You most likely got this infection through an infected USB/removable device.  Please follow the three (3) steps below:

1. Please install Panda USB Vaccine for USB devices:
http://research.pandasecurity.com/panda-usb-and-autorun-vaccine/ and it can be run on any drive on your machine for removable devices.

You are given the option to "vaccinate" your machine, which means to disable autoruns from infecting your machine again (or in this case preventing further damage from the current infection), and you can enable it again (although I wouldn't).  Plus you can "vaccinate" any USB/flash or removable device so that it cannot infect your machine.  This type of malware is easily transmittable because many people use USB's.

2. Check your computer for malware with Malwarebytes’ Anti-Malware (MBAM).
·   Download free http://www.malwarebytes.org/ for an on-demand scanner.
·   Double Click mbam-setup.exe to install the application.
·   After install, click update so you have latest database before scanning.
·   Under Settings:
o   General: Automatically Save File After Scan Completes is checked off
o   Scanner Settings:  Check all boxes
o   Updater: Download and install update if available is checked off
·   Once the program has loaded, select "Perform FULL Scan", then click Scan.
·   The scan may take some time to finish, so please be patient.
·   When the disinfection scan is complete, a log will appear in Notepad and you may be prompted to Restart. (See Extra Note).
·   Click the “remove selected” button to quarantine anything found.  You will find the infection details under the Quarantine tab.
·   The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
·   Copy & Paste the entire report in your next reply.

If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts -- Click OK to either and let MBAM proceed with the disinfection process; If asked to restart the computer, please do so immediately.

3. Check the information on the first post of this thread under Virus/Worms for you to check your machine for malware: http://forum.avast.com/index.php?topic=53253.0. 

Follow the directions for obtaining the OTL logs.  Post the two (2) OTL log as an attachment (Additional Options > Attach > Browse (the logs will be on your desktop > Post).  You can do this after posting your MBAM log.

Please let me know if you have any questions.  Thank you.