Virus infection warning every ten seconds! (Autorun.inf)

Hi, I’m using avast! 4.7 personal edition, and I’m having trouble with the autorun.inf file located in the c root directory. Avast seems to be having trouble to solve the problem to the point I can’t even use the computer (without disabling the protection) because it keeps warning about the virus every 10 seconds.

Please help me!

You don’t have to disable the avast protection or the infection will replicate.
You can manually delete that file. Or even use Unlocker to do it.

I also suggest:

  1. Disable System Restore and reenable it after step 3.
  2. Clean your temporary files.
  3. Schedule a boot time scanning with avast with archive scanning turned on.
  4. Use SUPERantispyware and/or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
  5. Test your machine with anti-rootkit applications. I suggest Trend Micro RootkitBuster.
  6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
  7. Immunize your system with SpywareBlaster or Windows Advanced Care.
  8. Check if you have insecure applications with Secunia Software Inspector.
You don't have to disable the avast protection or the infection will replicate.

Believe me, I don’t want to, but I have to if I want to complete any task, because it keeps warning every 10 seconds.

You can manually delete that file.

I’ve already done that, actually if I look at my c folder there’s no “autorun.inf” file.

I’m sorry, I don’t know what System Restore nor Unlocker are, could you explain it more please?

thanks for the help!

PD: ¿Por si acaso no hablas español?

Hi grungelover,

Restaurar Sistema de Windows y su interinteracción con AntiVirus
Google: Cómo deshabilitar y habilitar Restaurar sistema en Windows XP
http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/sldocid/20020515173946924

http://service1.symantec.com/SUPPORT/INTER/navintl.nsf/0/c5003cfc501be21288256f2700658d4c?OpenDocument

But Tech could well answer you in Spanish, he is Brazilian and a translator,

link:
http://www.symantec.com/es/mx/security_response/writeup.jsp?docid=2007-082706-1742-99&tabid=3

polonus

thanks polonus, I will try those tips.

well I followed tech’s first 3 steps and the problem seems to be solved, thank you guys.

The other ones won’t hurt either :wink:

Off Topic for “Tech”

Your link to AVG for a rootkit tool went to AVG, but to a Document Not Found page. Thought you’d want to know.

Thanks for the Trend Micro link. Think I’ll give that one a try.

:slight_smile: Keith Warner

Thanks… but I was checking my posts and I’m not suggesting AVG anymore due to their new product antimalware that will take out of the market the standalone antispyware and antirootkit.