Virus in Windows XP..pls help

[thetechfreak]

There is a virus in my PC which creates autorun.inf files in all removable drives and pen drives.The anti-virus doesnot detects virus even in safe mode.I installed new Anti virus in safe mode like Norton 2010 provided in November 2009.Tried avast and threatfire after updating.Pls tell how to remove virus.Thanks.
-----------------------------------------
Posted again:
-----------------------------------------
Help needed.
-----------------------------------------
Posted again:
-----------------------------------------
Help me somebody.Please

[hell_storm2006]

http://www.bleuken.com/2008/07/01/pr...oruninf-virus/

Hope this helps!

[thetechfreak]

I can remove autorun.inf but its created again and also setup.exe...pls help some one..

[Aspire]

^Did you stop its execution through MSCONFIG->STARTUP??

[CA50]

try avast and go for a boot time scan

[Gauravs90]

Try antivir antivirus

[ashikns]

Boot into safemode and disable all unwanted startup from msconfig.Also get avast and run a boot-time scan as CA50 said

[CA50]

Test your antivirus efficency :
copy this code in notepad and save as a text file, then rename the file to an exe one. If your AV detects the exe as a virus then your AV is a good one.

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Though this method is not fool proof, yet this will test the efficency of youe current AV.

[Gauravs90]

^^ Norton detects (EICAR test string) and status is high risk!!!!

But why though?
-----------------------------------------
Posted again:
-----------------------------------------
^^ Norton detects (EICAR test string) and status is high risk!!!!

But why though?

[Aspire]

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Detected Instantly

[CA50]

Originally Posted by Gauravs90

^^ Norton detects (EICAR test string) and status is high risk!!!!

But why though?

That piece of code is just for testing not virus.
Anyway norton is good. I tried it with Norton 2010 but didn`t detected it immediately. BTW did your AV detected the virus after on-demand scan or just after renaming.
-----------------------------------------
Posted again:
-----------------------------------------

Originally Posted by Aspire

Detected Instantly

What is ur AV

[Aspire]

^ Kaspersky Internet Security 2009

[CA50]

Originally Posted by Aspire

^ Kaspersky Internet Security 2009

grt AV then, but did it detect the virus on On-demand scanning or just renaming??
Is just renaming then your AV is not sleeping else it was sleeping and you kow what to do about a sleeping dog

[Gauravs90]

It detected instantly. even i was not able to save it

[CA50]

^ That means NORTON passes the virus detection test.

[Aspire]

It detected on renaming

[evewin89]

i use NOD32 and according to me itz one of the best anti.virus. so try it.

[CA50]

Originally Posted by Aspire

It detected on renaming

Though kaspersky is a grt AV, your Av is not detecting a simple piece of code. The resident protection may not be up to the mark. think abt it
-----------------------------------------
Posted again:
-----------------------------------------

Originally Posted by evewin89

i use NOD32 and according to me itz one of the best anti.virus. so try it.

hey man Nod32 is a cool piece of code, it even detected the code in txt form. I am using it with Vista.:-P:-P:-P

[CA50]

hi fnds see Nod32 even detected the code in text form, image below

[evewin89]

Originally Posted by CA50

Though kaspersky is a grt AV, your Av is not detecting a simple piece of code. The resident protection may not be up to the mark. think abt it
-----------------------------------------
Posted again:
-----------------------------------------


hey man Nod32 is a cool piece of code, it even detected the code in txt form. I am using it with Vista.:-P:-P:-P

u r rite man...coz one can really trust nod32. i think itz better than most of the well known AV till date :-P

[Gauravs90]

^^ i think norton is the best av till date. and 2010 is really great

[CA50]

Originally Posted by evewin89

u r rite man...coz one can really trust nod32. i think itz better than most of the well known AV till date :-P

yep nod32 interface is also cool. I am its fan.:-P:-P:-P
-----------------------------------------
Posted again:
-----------------------------------------

Originally Posted by Gauravs90

^^ i think norton is the best av till date. and 2010 is really great

Nortons but past encounter with it was not gud, so i don`t have a taste for it. There are other grt substitutes to norton

[Gauravs90]

Originally Posted by CA50

Nortons but past encounter with it was not gud, so i don`t have a taste for it. There are other grt substitutes to norton

Norton is really changed since 2009 version and it's faster than before.

[CA50]

Originally Posted by Gauravs90

Norton is really changed since 2009 version and it's faster than before.

that may be true, but i don`t have any personal interest in norton, i prefer avast and nod32 to norton. I don`t know abt the other members. Every body has got their own taste.:-P:-P:-P

[rhitwick]

So, has the OP resolved his issue?
If yes, I would like to know how?

[rondadevil]

Originally Posted by thetechfreak

There is a virus in my PC which creates autorun.inf files in all removable drives and pen drives.The anti-virus doesnot detects virus even in safe mode.I installed new Anti virus in safe mode like Norton 2010 provided in November 2009.Tried avast and threatfire after updating.Pls tell how to remove virus.Thanks.
-----------------------------------------
Posted again:
-----------------------------------------
Help needed.
-----------------------------------------
Posted again:
-----------------------------------------
Help me somebody.Please

An autorun.inf file stores information of an external disk. When ever an external disk is inserted, the computer first checks the autorun.inf file and executes the command written in it. First backup all the stuff in the pendrive and then format it. Then get a usb Panda Antivirus and then netralise the pendrive . It just creates an "autorun.inf" which block any software from overwritting it into the pen drive and no softwares are allowed to enter your pendrive.

[CA50]

hey buddy why don`t you use this software " USB disk security "

http://www.zbshareware.com/setup.exe

this software automatcally detects all tpyes of autorun viruses in removable drives including optical ones.

[thetechfreak]

Ok here is my update.I have tried the following antivirus-
Norton 2010
Avast! Antivirus
Kaspersky and
i had done a boot time scan but no use.
Result-I have installed Windows 7 RC1 provided by digit in anniversary issue and its
clean of any virus as of now

[CA50]

try nod32 it may help

[Gauravs90]

Well you had not tried antivirus which are kings in malware detection. They are -

avira antivirus
PC tools antivirus
panda cloud free

they have highest ratings for detection.