11

Hi again,
I have got around it. Before I started doing the steps that you told me, I looked thoroughly for the worm files I told you about and I did not manage to find them. So, the deletion actually worked and the only problem that I had left was the viewing of hidden files and the worm was erased even from the registry.
So, my conclusion for other who have the same problem is to follow the same steps mentioned here:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_ONLINEG.JRC&VSect=Sn
except the part of “Removing Other Malware Entries from the Registry” I could not find the entries in the same places as mentioned so I ran a search through the whole registry looking for the word “ntde1ect.com” instead of “ntdelect.com”.
And the files need to be deleted after deleting the autorun.inf is to delete these two files:
avpo.exe
avpo0.dll
both are in the windows\system32 folder.

Thank you all for the help guys. One thing I miss to understand is that why did not avast give me a warning when I plugged in the infected flash stick??!!
I updated avast only two days prior to the incident.

Dr.Mohammed