1. You may have noticed things look a little different around here - we've switched to a new platform (XenForo) and have some new forum styles and features. This how-to guide will help you find your way around. If you find anything that looks strange, post it in this thread.

How do i get rid of autorun.inf virus?

Discussion in 'Security and Anti-Virus Software' started by Ev0lutionz, Jan 29, 2009.

Thread Status:
Not open for further replies.
  1. Ev0lutionz

    Ev0lutionz Notebook Consultant

    Messages:
    111
    Likes Received:
    0
    Trophy Points:
    30
    I used USB flash disinfector on my PC and it seems that the virus is still there. I plugged in my psp/external Hard drives and it infected them even though i have used it. Can anyone tell me how to get rid of it? Now my external Hard disks are opening a new window whenever i double click them but previously, they open in the same window i opened my computer.
     
  2. flipfire

    flipfire Moderately Boss Super Moderator

    Messages:
    11,217
    Likes Received:
    56
    Trophy Points:
    466
    AVG8 will find it instantly, remove the worm and replug the USB drive. Ive seen this USB worm too many times..

    or you can format the drive. You will still need to find the source of the infection or it will keep occuring.
     
  3. Ev0lutionz

    Ev0lutionz Notebook Consultant

    Messages:
    111
    Likes Received:
    0
    Trophy Points:
    30
    Is this a virus?

    It seems to be seen in every of my external HDD i plugged in, including the root directory of C.

    [AutoRun]
    ;fKdjK00
    open=imo.exe
    ;s6cKDaAsoalL2aal14CwSpZdZdwq09slesAsL1Ssk242opwwmfAwa
    shell\open\Command=imo.exe

    Avast in my other pc picked it up as imo.exe as a threat.
     
  4. Baserk

    Baserk Notebook user

    Messages:
    1,794
    Likes Received:
    1
    Trophy Points:
    56
    You will have to run a couple of antimalware programs to make sure you got rid of this malware.
    Check out SAS, MBAM and DrWeb CureIt. Download links are in my sig.
    Cheers.
     
  5. Ev0lutionz

    Ev0lutionz Notebook Consultant

    Messages:
    111
    Likes Received:
    0
    Trophy Points:
    30
    Btw will they interfere with AVG?
     
  6. Ev0lutionz

    Ev0lutionz Notebook Consultant

    Messages:
    111
    Likes Received:
    0
    Trophy Points:
    30
    Hi btw, this is what AVG picked up relating to the autorun.inf virus. My other pc picked up imo.exe with avast.

    [​IMG]
     
  7. TeeJay 44

    TeeJay 44 Notebook Deity

    Messages:
    1,048
    Likes Received:
    0
    Trophy Points:
    0
    I got rid of this pest with Avira.

    When you plug the Flash Drive in it will detect the "Virus". If I remember correctly, Avira will tick "deny access" in the options given.

    Untick "deny access" and tick "delete". You will not loose any data. Just gets rid of the pest.

    And if the warning pops up again and again do the same. Delete. This thing hides everywhere. Always just choose "delete".

    It will eventually die. And your annoying problem will be gone.

    Cheers,
    Theo
     
  8. Ev0lutionz

    Ev0lutionz Notebook Consultant

    Messages:
    111
    Likes Received:
    0
    Trophy Points:
    30
    hmms, same problem as me? imo.exe infecting autorun.inf?
     
  9. Baserk

    Baserk Notebook user

    Messages:
    1,794
    Likes Received:
    1
    Trophy Points:
    56
    Are you still having problems with 'imo.exe'?
    Make sure that your DNS settings are ok so that security programs can be updated before using them.
    OpenDNS is worth checking.
    Did you post a question on the KAV forum yesterday under Ev0d3vil, if so, the reported trojan must be eliminated also.
    Cheers.

    P.S. the programs I suggested in my previous post won't interfere with your AV.
     
  10. TeeJay 44

    TeeJay 44 Notebook Deity

    Messages:
    1,048
    Likes Received:
    0
    Trophy Points:
    0
    And that is only the preliminary scan by Avira.

    It has not even really scanned your comp yet.

    Suggestion:

    1. Let Avira pick up the "Virus" when you plug the flashstick in.
    2. Everytime the warning comes up..."click delete"...instead of "deny access"
    3. Once the flash is supposedly cleared....remove it.
    4. Scan your computer with totally up to date Avira. There are going to be plenty stops where Avira is finding stuff....always choose "delete".
    5. Once Avira has supposedly found everything.....start again. Scan my computer. More trash will be found. Always choose "delete".
    6.Restart the computer.
    7.Make sure all is well.
    8.Plug in the flash stick. Tell AVIRA to scan the flash stick. Again.
    9.Your problems should be gone. No Autorun. And no more problems.

    And all your data is still there. Where it belongs. Virus is history.

    Cheers,
    Theo
     
  11. Ev0lutionz

    Ev0lutionz Notebook Consultant

    Messages:
    111
    Likes Received:
    0
    Trophy Points:
    30
    well yeap. But the trojan is still there even after i followed those steps.
     
  12. KarenA

    KarenA Notebook Evangelist

    Messages:
    565
    Likes Received:
    0
    Trophy Points:
    30
    Is there a way to not let the virus infest itself in my thumb drive everytime I plug my drive in public computers?

    I can easily delete it with Avira AntiVir, but it still is annoying. If I didn't scan it first in my computer and plug it into other's computer, they usually blame me for having a thumb drive with this worm.
     
  13. Baserk

    Baserk Notebook user

    Messages:
    1,794
    Likes Received:
    1
    Trophy Points:
    56
    You mean that SAS, MBAM and DrWeb CureIt couldn't remove the trojan?
    Or do you mean that you've followed the steps, advised on the KAV forum, and the trojan is still there?
    Btw, Smitfraudfix is also an excellent program/tool to remove malware. Give it a try.
    Cheers.
     
  14. TeeJay 44

    TeeJay 44 Notebook Deity

    Messages:
    1,048
    Likes Received:
    0
    Trophy Points:
    0
    No. I have disinfected multiple computers and drives with this pest.

    As soon as you plug a "worm or virus free" flash stick into an infected computer.....it automatically loads the autorun onto the flash stick again.

    And you are back to square one. Again.

    The only way is to ensure you don't plug your clean flash stick into a infected comp. And the only way that happens is if you have personally supervised, controlled, monitored the host computer. And we all know that is friggin impossible....

    So, we have to live with this pest for now.

    As I have said so many times....Avira is brilliant at picking up this trash but you have to think for it. Always "delete" and never "deny access". It will eventually kill this POS.

    Cheers,
    Theo
     
  15. zfactor

    zfactor Mastershake

    Messages:
    11,135
    Likes Received:
    0
    Trophy Points:
    455
    also norton has a tool for this specific virus...
     
  16. Ev0lutionz

    Ev0lutionz Notebook Consultant

    Messages:
    111
    Likes Received:
    0
    Trophy Points:
    30
    this sucks man. I have been hit by a recycler autorun.inf virus ? I dont even remember doing anything to get hit by it. Never plugged in any flash drives whatsoever.
     
Thread Status:
Not open for further replies.

Share This Page