autorun problem

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Hi Gurus

Every time I insert a USB stick or connect my Camera a folder is
created in the stick or the camera with the name

S-51-9-25-5477446591-1734435234-612387968-1724

and an autorun.inf file is created. Avast 4.8 detects this and offers
to delete the file. After deleting both the file and the folder they
are immediately created again and I am never able to really get rid of
this.

The autorun.inf file contents:
-------------------------------------------------------------------------
[autorun]

open=RECYCLER\S-51-9-25-5477446591-1734435234-612387968-1724\tazrm.exe

icon=%windir%\system32\SHELL32.dll,4

action=Open folder to view files

shell\open=Open

shell\open\command=RECYCLER\S-51-9-25-5477446591-1734435234-612387968-1724\tazrm.exe

shell\open\default=1

-------------------------------------------------------------------------
I have run a virus check on C:\ and fid nothing suspicious. Autoruns
program also does not show any suspicious application that starts at
bot time.

How can I get rid of this menace?

XP Pro SP3
--
Many thanks in advance for your help.

ClueLess


Re: autorun problem


| Hi Gurus

| Every time I insert a USB stick or connect my Camera a folder is
| created in the stick or the camera with the name

| S-51-9-25-5477446591-1734435234-612387968-1724

| and an autorun.inf file is created. Avast 4.8 detects this and offers
| to delete the file. After deleting both the file and the folder they
| are immediately created again and I am never able to really get rid of
| this.

| The autorun.inf file contents:
| -------------------------------------------------------------------------
| [autorun]

| open=RECYCLER\S-51-9-25-5477446591-1734435234-612387968-1724\tazrm.exe

| icon=%windir%\system32\SHELL32.dll,4

| action=Open folder to view files

| shell\open=Open

|
shell\open\command=RECYCLER\S-51-9-25-5477446591-1734435234-612387968-1724\tazrm.exe

| shell\open\default=1

| -------------------------------------------------------------------------
| I have run a virus check on C:\ and fid nothing suspicious. Autoruns
| program also does not show any suspicious application that starts at
| bot time.

| How can I get rid of this menace?

| XP Pro SP3


You are infected with an AutoRun worm and Avast doesn't recognize it.

You can try my Multi-AV Scanning Tool in my signature and/or Malwarebytes Anti
Malware.

--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp



Re: autorun problem

On Sat, 12 Mar 2011 09:34:31 -0500, "David H. Lipman"

Quoted text here. Click to load it

INF:AutoRun-AA[Wrm]

--
Rich Webb     Norfolk, VA

Re: autorun problem

MS Security Essentials caught it and removed it as well.

Chris

Quoted text here. Click to load it


Re: Re: autorun problem

On Sat, 12 Mar 2011 09:34:31 -0500, "David H. Lipman"

Quoted text here. Click to load it

Thanks a million, Malwarebytes did the trick

--
Thanks you for your time and attention
ClueLess

Re: autorun problem


| On Sat, 12 Mar 2011 09:34:31 -0500, "David H. Lipman"

Quoted text here. Click to load it


| Thanks a million, Malwarebytes did the trick

Fantastic.  Thank you for the update.

--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp



Re: autorun problem

On Sat, 12 Mar 2011 19:57:46 +0530, Clueless

Quoted text here. Click to load it

BV:AutoRun-X[Wrm]

--
Rich Webb     Norfolk, VA

Site Timeline