Hi
I am desperately trying to fix a problem that I have identified. I am running Avast Home (Win XP). Avast has not identified any of the following, and I have picked up on them by chance.
I have found a few folders on my root drive installed as system folders, with the ffg names: “CNN”, “BCC”, “nIKalod”, “NNITEDN”, “rEdNuht”. (These are now also present on all my protable storage devices).
The contents of the folders show a recycle bin. I have tried to delete these folders, but they simply reappear immediately after a delete OR XP returns a message “file in use by another program”. Commonly the file that is listed as in use is “orgapin.exe”.
I have also found that an executable “Lic.exe” loads on startup.
None of the above are listed in any of the virus databases.
Can anyone HELP please? I am desperate - and also do not know the extent to which my machine is compromised.
hi Eddy / YoKenny
Many thanks for your advice - much appreciated. I am rushing around now getting ready for a long work trip - and will follow up on this when I am back. I am concerned though that the infection may be present on my portable storage -2 x flash drives and 1 USB hard drive - (which contains all my precious data) and which I need to take with me - any suggestions regarding continued use of these - but not on my machine?
Run Flash-disinfector or autorun eater (link above) which should give a good idea whether there is an infection on the pen drives.
That’s a quick fix.
Best to scan the storage devices with an antispyware/AV, however. MBAM is very good.