I examined both of 2 available actions but any time I turn on my computer I see this warning.
the file is recreated by a dropper probably… it may be a simple autorun method or a more complex system… can you see the autorun.inf file in C: root? the file is often hidden by FS flag, you should check the option to show hidden, system and protected files…
I suggest you’ve schedule a boot-time scanning:
Start avast! > Right click the skin > Schedule a boot-time scanning.
Select for scanning archives.
Boot.
If infected files are found, it’s safer to send them to Chest instead of deleting them.
This way you can further analysis them.
can you see the autorun.inf file in C: root? the file is often hidden by FS flag, you should check the option to show hidden, system and protected files..
these codes are in autorun.inf and I don’t know what are them. plz tell me what should I do with them.
[autorun]
action=Open Drive
open=Thumbs OPEN
icon=C:\windows\system32\shell32.dll,8
shell\open=Open
shell\open\Command=Thumbs OPEN
shell\open\Default=1
shell\explore=Explore
shell\explore\Command=Thumbs EXPLORE
shell\AutoPlay=AutoPlay
shell\AutoPlay\Command=Thumbs OPEN
send the file c:\thumbs.exe to www.virustotal.com analysis and post the result here, pls…
How can I send it,when I can find nothing by scaning
isn’t the file hidden? you can try to run a command line (cmd.exe) and type attrib -r -s -h C:\thumbs.exe - can you see the file now?