Win32:Confi[WRM]

Viruses and worms
1

On my last post, I was having problems containing a suspected infection that was on my J drive. The infection was BV:AutoRun-S [WRM] located in a autorun.inf file. I was never able to delete it or move it to the chest, for I kept getting a avast! access denied, file not located. I was suggested a few drive scanners, which I used, but never got any results. I then concluded that it was a false positive.

After installing the new Avast 5.0 Free addition, I did a quick scan on the same drive. It instantly alerted me of the Win32:Confi[WRM] that has a file extension of jwgkvsq.vmx Avast was able to move it to the chest this time.

I’m currently running a full system scan of my PC right now to be safe.

My questions are,

What is this Win32:Confi[WRM]? Like what does it do. I’m currently not experiencing any pc problems.

Also, can i safely delete this virus after its been uploaded in the next update?

Oh and thank you Avast for this free AV. My windows defender and other third party apps never detected this. I also thank the community for their help.

2

That’s Conficker, a real infection.

  • Please download Flash Disinfector by sUBs and save it onto your desktop
  • Double-click on Flash_Disinfector.exe to run it and follow the prompts that may appear. Note:Some security programs will flag Flash_Disinfector as being some sort of malware, you can safely ignore these warnings.
  • The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow utility to clean up those drives as well.
  • Wait until it has finished scanning and exit the program.
  • Reboot your computer when done.

Note: Flash Disinfector will create a folder called autorun.inf in each partition and every USB drive plugged in when you ran it. Do not delete it. It will help protect your drives from future infection.

3

Win32/Conficker
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32%2FConficker
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Search.aspx?query=Win32/Conficker

Conficker Working Group’s “Custodian of the Tools”
http://www.confickerworkinggroup.org/wiki/pmwiki.php?n=ANY.RepairTools

4

The avast scanner came back negative on the thorough scan, but noted that it failed to scan all files on my j drive. I downloaded most of the conflicker removal tools, and will be running them one by one just to be safe. As for the Flash disinfector, it will not run on my pc as stated on a previous topic of mine. Is there anyway I can create the file that it would have created to prevent future infection and put it on my thumb drive?

5
prevent future infection and put it on my thumb drive?
Panda USB Vaccine http://www.pandasecurity.com/homeusers/downloads/usbvaccine/
6

No more threats detected, and I was able to get the false autorun.inf file installed with the above requested software. Thanks for the help. Hopefully I want be back, but you never know :wink:

7

No need to stay away because you have no problems.

Come back and learn more! :slight_smile: