autorun.ini

Hello guys

avast keep getin to identify malware gen. on every usb or ipod that i put in! Found solution on forum with flashdisinfector.exe and works! But on every new usb stick or something with memory avast always detect the same. If i do format on same stick that i previously formated same thing happend. My question is how to remove that virus! For me temporary solution from flasdisinfector is totaly unaccetable cause knowing that i have virus inside of my PC. Ive figureit out that this progrma only do rename of virus but it stil persists!

Any solutions? Any advices?

Scand my PC also with Bitdefender10, Kaspersky 7 and AVG but neithercan find that malware gen.

regards and gretings from Bosnia & Herzeg.

Anyone?

I’ve had a bit of a look around. I’m not at all familiar with this problem, but I don’t think this is a malware that’s being detected (although it may have been, originally), I think what is being detected is the hidden folder that flashdisinfector created on each partition.
The name of this folder is autorun.inf. Locate it, try scanning it, see if that is the culprit.
I’ve recently read a couple of opinions that suggest that the use of such a folder in an attempt to protect these drives from infection is not likely to be effective against any of the more sophisticated malware around. Apparently the trick is well known enough that any malware author worth the title would be able to write a workaround.
Which doesn’t help, of course.

I suggest:

  1. Disable System Restore and then reenable it again.
  2. Clean your temporary files.
  3. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  4. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
  5. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
  7. Immunize your system with SpywareBlaster or Windows Advanced Care.
  8. Check if you have insecure applications with Secunia Software Inspector.

Or full computer on-line scanning:
Kaspersky (very good detection rates)
ESET NOD32
Trendmicro housecall
F-Secure
BitDefender (free removal of the malware)

Hy
thanks for advices, ill try that later and let you know the results.

regards

We’ll be here to help :wink:

Hello

me again:) followed by your exact instructions as written found via Dr. Web malwaregen in spolsv.exe and erased succefuly then tryed other programs with no such succes exept Malwarebytes also found same as Dr. web but now only in recyclers and 2 trojans!
From suggested online scaners none found any kinda of infections. Which suprises me a lot!

After cleaning and restart i tryed with several usb sticks and theres no more viruses in autorun.ini.

Friend thanks for brief and hepfull advices on removing and detecting, if you ever come to Bosnia you have giant beer and sleepover:)

once againg thank you

regards

Djile

Djile, glad your computer is clean now :wink: