Malware name: VBS:Malware-gen File name: (drive letter):\autorun.inf

Viruses and worms
1

I got my PC infected(i dont know the source-may be a pen drive)…Avast’s latest update(02/02/2008) detected the virus & takes the action i want(it can move the virus to chest,delete it,etc but cant disinfect it)…BUT the virus comes back again & again…In about half a minute,the on-access scanner detects it,asks for action,i chose delete ,it deletes the virus,and again in some seconds,the whole process repeats…The virus is found in all my drives ! :(HELP The info shown by avast is as under:
File name: C:\autorun.inf
Malware name: VBS:Malware-gen
Malware type: Virus/Worm
VPS version: 080202-0, 02/02/2008

2

1 - Flash Drive Disinfector
Download Flash_Disinfector.exe by sUBs from >here< and save it to your desktop.[*] Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.[*] The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well.[*] Wait until it has finished scanning and then exit the program.[*] Reboot your computer when done.Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don’t delete this folder…it will help protect your drives from future infection.

3

I am also having the same problem.
I cant show the hidden files. Even i changed floder options it is allowing me to show hidden files…
other users(non-administrators) are not allowing to open any drive like C,D,E…,

Please help me on this isse…

4

Welcome to the forums, satheez. :slight_smile:

It would be better if you start your own thread for your problem. This is because even though your problem seems the same, how you got infected, where the problem is located, and the solution could be different. Doing this will also save confussion in the answers provided for more than one problem / solution.

Before you start your new thread …

Please download HijackThis from the link below, run the program but do not make any fixes, and then post the log results in this new thread using the “copy & paste” method. It will probably take more than one post to be able to get the complete log posted. Someone will review your log and then offer help.

http://filehippo.com/download_hijackthis/

5

I stopped it from coming back by naming a blank file autorun.inf, and making it read only- I have re-booted a few times, now, and have had no recurrance.

6

Yes, that’s what flashdrive disinfecter will do + more. :slight_smile:

7

Hey there. I’m new here too. I’ve had the same problem with my 3 flash disks and it’s really annoying. I used the Flash Disinfector and there’s a blank file autorun.inf I formatted my flash disk and the problem reoccurred. What’s the reason of that?

8

;D :o woops Boo! Boo!

9

Q.Lady
I think what the Boo Boo was, if I read this thread correctly, is that the program puts protection on your pen drive- so put it back
Best to start your own thread
Run Malware Bytes Anti Malware, REMOVE checked items and post the log if there are any hits

Best to start your own thread

thanks for the on topic comment

10

thanks so much for your reply. I’d definetely start my own thread if the problem still persists.

11

Thanks essexboy.
I had the same problem and your solution worked.

Many thanks :slight_smile:

12

Thanks essexboy, your solution works perfectly. Before i read this thread, i played around with the registry, and did many other things but none worked. Thanks.
I have a question, is the flash drive infected or my computer? how can i determine which is the one infected?

13

The reason i asked the question “how to determine whether the flash drive or the computer is infected” is because when you use the flash drive disinfector, the warning of the virus stops, but a folder is created. If you delete the folder, the warning of the virus comes back, why is that? In other works the flash disinfector doesn’t clean the flash drive, or does it?

14

If you read the instructions from essexboy again particularly the blue text you will see why. The folder created is to prevent future infection as with an autorin.inf ‘folder’ even if they try to insert an autorun.inf ‘file’ the folder supersedes it.

15

All i want to know is if my computer is infected? Thanks for your answer though. Can someone clarify my questions.