Spyware, Viruses, & Security forum

General discussion

different AUTORUN virus

by mariner_simple / October 11, 2008 8:00 PM PDT

Hii All,
Yesterday I found something strange on my F Drive. There is an autorun file with internet explorer icon along with an autorun setup information type file. I tried to delete it thinking it to be virus (as it had come on its own) but to my surprise it came again on its own within a couple of seconds. I opened the "setup information file" which is basically a notepad and found :
[Autorun]
open=Autorun.exe
Icon = Autorun.exe

Now I deleted the these commands from this notepad and saved blank notepad, and then deleted both the files.But this all is to no avail it came back and to my surprise the same commands were there again in that setup info notepad.
Now I clicked on the Autorun (Internet Explorer Icon) the a pop up came which says that "this is being run in compatibility mode and not all features are enabled" on closing that pop up Internet Explorer launches. Then I went for a complete virus scan using AVG and then McAfee but these could nto find anything malicious.
Today there was something more I found that the icon of F Drive (where the problem started) has been changed on its own to that of Internet Explorer Icon Sad dont how big is the trap..
This is just to tell you that I am using Mozilla Firefox, I have Win XP in my laptop.
If you need any more information do mail me. I will be thankful if anyone could help me out of this problem.
Please help
Mariner
(P.S. the topic i wrote as different autorun because i have seen problem of autorun with USB drives but here no such thing happened)

Discussion is locked
You are posting a reply to: different AUTORUN virus
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: different AUTORUN virus
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Re: different AUTORUN virus .....
by Marianna Schmudlach / October 12, 2008 2:41 AM PDT

First I would suggest:

Please download Malwarebytes Anti-Malware or alternate download link

* Make sure you are connected to the Internet.
* Double-click on Download_mbam-setup.exe to install the application.
* When the installation begins, follow the prompts and do not make any changes to default settings.
* When installation has finished, make sure you leave both of these checked:
* - Update Malwarebytes' Anti-Malware
* - Launch Malwarebytes' Anti-Malware
* Then click Finish.
* MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
* If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.

* On the Scanner tab:
* - Make sure the "Perform Quick Acan" option is selected.
* - Then click on the Scan button.
* The next screen will ask you to select the drives to scan. Leave all the drives selected and click on the Start Scan button.
* The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
* When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
* Click OK to close the message box and continue with the removal process.
* Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
* Make sure that everything is checked, and click Remove Selected.
* When removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)
* The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.

* -- Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

**If you encounter this message:"c:\program files\malwarebytes' Anti-Malware\mbamext.dll Unable to register the dll/ocx: RegSvr32 failed with exit code 0x5" Click on ignore mbamext.dll


...

Download and scan with SUPERAntiSpyware Free for Home Users

* Double-click SUPERAntiSpyware.exe and use the default settings for installation.
* An icon will be created on your desktop. Double-click that icon to launch the program.
* If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here.)
* Under "Configuration and Preferences", click the Preferences button.
* Click the Scanning Control tab.
* Under Scanner Options make sure the following are checked (leave all others unchecked):

Close browsers before scanning.
Scan for tracking cookies.
Terminate memory threats before quarantining.

* Click the "Close" button to leave the control center screen.
* Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
* On the left, make sure you check C:\Fixed Drive.
* On the right, under "Complete Scan", choose Perform Complete Scan.
* Click "Next" to start the scan. Please be patient while it scans your computer.
* After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
* Make sure everything has a checkmark next to it and click "Next".
* A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
* If asked if you want to reboot, click "Yes".

.......

If the above scanners don't find anything........

then have a look here:

http://bleuken.i.ph/blogs/bleuken/2007/06/29/viruses-that-uses-autoruninf/

Collapse -
@ Marianna
by mariner_simple / October 12, 2008 6:27 AM PDT

hiii Marianna
thanx for ur prompt reply..
as a matter of fact i forgot to mention in my previous post that i have malwarebytes anti-malware on my lappy and i have already scanned my lappy using that. frm last couple of days there was aproblem with its update so today i updated it manually as suggested by u and run the scanning once again but the result remains the same "no threats found"..
so at the moment i'm downloading superantspyware .. lets see how good is it...
i wanted to ask u something... some of my friends said that once u download a free version of these antivirus or antispyware u get trapped into it bcoz if u want to uninstall it they leave some virus or spyware on its own ... and u are again forced to either purchase or download the free version of same software.. i am a newbie in this field but would like to listen from you before doing anything regarding it...
thanks once again for the help
Regards
Mariner

Collapse -
@ Mariner
by Marianna Schmudlach / October 12, 2008 6:38 AM PDT
In reply to: @ Marianna

With MBAM (Malwarebytes Anti-Malware) you can easily uninstall it via add\remove. The same with SAS (SuperAntiSpyware)

Pls. let us know IF SAS finds anything.

Collapse -
@Marianna
by mariner_simple / October 13, 2008 12:14 AM PDT
In reply to: @ Mariner

SAS found a no. of threats. (21 in registry threats and 51 File threats).. and it quarantined/deleted all.. but the problem remains Sad
I guess now i have to live with this problem.
Another things is that I had another antispyware which I removed from Add/Remove program.. after removal it asked if I want to restart and I clicked yes. But it didn't went into restart sequence. Then I went to restart my lappy manually and to my annoyance nothing happened. I waited for some 5 mins thinking that may be it is processing something. Then I checked in the task manager and no program was running. Then I tried to shut down my Lappy but again nothing is happening. Is it possible that it s happening because of the software I removed??
I am in a great deal of problem now. Could you please help me in this regard??

Collapse -
Software........
by Marianna Schmudlach / October 13, 2008 1:09 AM PDT
In reply to: @Marianna
Is it possible that it s happening because of the software I removed??

What "software" did you remove?

Are you getting any kind of "error messages" ?
Collapse -
@ Marianna
by mariner_simple / October 13, 2008 2:03 AM PDT
In reply to: Software........

I dont remember the exact name but it was some spyhunter/spykiller antispyware.
and it does not show any msg. Nothing happens when i click on the Shut down or restart button.

Collapse -
Shutdown \ restart
by Marianna Schmudlach / October 13, 2008 2:21 AM PDT
In reply to: @ Marianna

Mariner,

give the following a try:

Go to to Start > run > type: 'sfc /scannow'.

Have your Windows disk handy !

Collapse -
SHUTDOWN & RESTART Troubleshooting
by Marianna Schmudlach / October 13, 2008 2:27 AM PDT
In reply to: @ Marianna
Popular Forums
icon
Computer Newbies 10,686 discussions
icon
Computer Help 54,365 discussions
icon
Laptops 21,181 discussions
icon
Networking & Wireless 16,313 discussions
icon
Phones 17,137 discussions
icon
Security 31,287 discussions
icon
TVs & Home Theaters 22,101 discussions
icon
Windows 7 8,164 discussions
icon
Windows 10 2,657 discussions

CNET FORUMS TOP DISCUSSION

Help, my PC with Windows 10 won't shut down properly

Since upgrading to Windows 10 my computer won't shut down properly. I use the menu button shutdown and the screen goes blank, but the system does not fully shut down. The only way to get it to shut down is to hold the physical power button down till it shuts down. Any suggestions?