Can't delete a virus//worm

Help,

I have a document on my USB memory and avast home keeps on telling me that it finds a virus but when i click on delete it doesn’t delete the virus/worm. I am using windows XP Pro. Avast sees the virus as autorun.inf;
Malware name: BV:AutoRun-H [Wrm]
Malware type: Virus/Worm.

Can someone help me please.

  1. Open Autorun.inf into Notepad, post the contents here.
  2. If in its contents there is a file name and path, open Windows Explorer, go to that file (maybe it is hidden), right click it and scan it with avast. Post back the results. If the file is infected, send it to Chest.
  3. Run a full scanning with avast (archives included).

:slight_smile: Hi :

In the Past we have recommended using a FREE program called “Flash
Disinfector” ; however, there has been some recent “News” that should be
considered at http://forum.avast.com/index.php?topic=42967.msg359434;topicseen#msg359434 .

I wouldn’t worry about that recent news totally unproven, no other words for it, there is absolutely no confirmation that this is down to flash disinfector, considering it doesn’t modify the registry.

I have no problem in recommending it to do the job of clearing and prevention of future infection. That is what I would continue to suggest until firm evidence to the contrary is produced, which it hasn’t.

Hi Spiritsongs,

Yes the use of Flash Disinfector is now beyond suspicion. There were some doubts raised by users that made the wrong extrapolations, in the thread we went deep into these matters and yes, I can confirm now what DavidR states here is true.
Flash Disinfector will target the following Flash malwares(in general):

W32/Perlovga (copy.exe | host.exe)
VBS_RESULOWS.A (Hacked by Godzilla, Hacked by Moozilla)
Bha.dll.vbs
w32automa worm (Autorun.vbs)
Trojan.Win32.VB.atg | Win32/Dzan | Worm_vb.bnr (tel.xls.exe | mmc.exe)
W32/RJump.worm (RavMonE)
Worm.Win32.Delf.bf | W32.Fujacks (spoclsv.exe)
W32.Fujacks.BH (Fucker.vbs)
WORM_AGENT.PGV (soundmix.exe)
W32/Hakaglan.worm (RVHost.exe)
Trojan.Win32.VB.ayo [AVP] (Macromedia_Setup.exe)
Trojan.VBS.DeltreeY.b#1 (Destrukto!!! | destrukto.vbs)

What will Flash Disinfector Do

  • Clean up junks created by flash malwares
  • Deletes autorun.inf from every root folder
  • Fix back damages done to your system
  • Creates an autorun.inf folder in the root of your system drives
    For those people that use Flash Disinfector leave the file it makes, autorun.inf onto the removable disk for further protection,

download Flash Infector from here: http://download.bleepingcomputer.com/sUBs/Flash_Disinfector.exe

Another piece of software to use is usb firewall: http://net-studio.org/application/usb_firewall.php

polonus

Very good on prevention and does not disable the autorun feature of Vista/XP.