• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

Autorun Worm?

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Viruses // Worms

View previous topic :: View next topic  
Author Message
teddybear
Just Arrived
Just Arrived


Joined: 09 May 2006
Posts: 0


Offline

PostPosted: Tue Jul 22, 2008 6:53 pm    Post subject: Autorun Worm? Reply with quote

Hello, I did a kaspersky online scan and it says I am infected with an autorun worm, how can I get rid of it?

here is kaspersky report:
===================

KASPERSKY ONLINE SCANNER 7 REPORT
Wednesday, July 23, 2008
Operating System: Microsoft Windows XP Professional Service Pack 2 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Tuesday, July 22, 2008 12:16:29
Records in database: 984670


Scan settings
Scan using the following database extended
Scan archives yes
Scan mail databases yes

Scan area My Computer
C:\
D:\

Scan statistics
Files scanned 79518
Threat name 1
Infected objects 1
Suspicious objects 0
Duration of the scan 01:17:41

File name Threat name Threats count
C:\Documents and Settings\All Users\Application Data\autorun.inf Infected: Worm.Win32.AutoRun.dhm 1

The selected area was scanned.

=====================

Thanks in advance. Embarassed
Back to top
View user's profile Send private message AIM Address
es0teric
Just Arrived
Just Arrived


Joined: 12 Jul 2008
Posts: 0


Offline

PostPosted: Wed Jul 23, 2008 5:53 am    Post subject: Reply with quote

I may just be oversimplifying matters, but I would try just navigating to that directory and deleting the file.

Code:
C:\Documents and Settings\All Users\Application Data\autorun.inf


If it doesn't let you or says it's in use, reboot into safe mode and then give it a try.

I've never used Kaspersky, but I assume it would have an option to clean/quarantine automatically, no?
Back to top
View user's profile Send private message
AdamV
SF Mod
SF Mod


Joined: 06 Oct 2004
Posts: 24
Location: Leeds, UK

Offline

PostPosted: Thu Jul 24, 2008 12:14 am    Post subject: Reply with quote

Reading around recently I've noticed a lot of discussion about false positives on suppsed autorun.inf worms.

Certainly no harm to be had from deleting the offending file. If you're still stuck, go talk to the SMART guys on here who can help diagnose and fix malware issues.
Back to top
View user's profile Send private message Visit poster's website
teddybear
Just Arrived
Just Arrived


Joined: 09 May 2006
Posts: 0


Offline

PostPosted: Thu Jul 24, 2008 7:10 am    Post subject: Reply with quote

Oh thanks guys, there isnt an option to delete the file in the online scan thing, but I found out there is a tool to get rid of that Worm, downloaded it and it deleted 2 of them, even tho Kaspersky found only one, its called W32/worm auto run removal or something, I forgot but you shall find it on google Razz
Back to top
View user's profile Send private message AIM Address
Godsp3ed
Just Arrived
Just Arrived


Joined: 23 Apr 2009
Posts: 0
Location: Universe

Offline

PostPosted: Mon Apr 27, 2009 8:00 am    Post subject: Reply with quote

Just do the following steps :\

1)Open Command Prompt (open Start/Run and type 'cmd' and press 'Enter')

2)now type 'X:' (where X is the drive letter for your partitions)

3)then type 'cd\'

4)now 'del autorun.* /f /q /s'

do this on all partitions by selecting/opening them using step 2 and then following steps 3 and 4...
Back to top
View user's profile Send private message
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Viruses // Worms All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register