is this a virus infection?

[ronweasley]

hi,

im using a windows xp pc with avg free a/v, and zonelarm free firewall, and all windows updates installed as of now

my problem is......whenever i insert my flashdrive into my pc....2 files get created.....:
autorun.inf with the following code

[Autorun]
open=MicrosoftPowerPoint.exe
shellexecute=MicrosoftPowerPoint.exe
shell\Auto\command=MicrosoftPowerPoint.exe

and a program called "MicrosoftPowerPoint" which has the icon of a folder...

this is happening even after formating and reinserting the flashdrive....

the problem started after a friend of mine borrowed my flashdrive and returned it...after which i found the above two files and some more......a file called "Funny scandal.avi"...which i found was an application..............after de;eting all those....the above mentioned problem keeps occuring.....

is this a virus attack.......?????

thanks,
ronweasley


PS: avg antivirus never detected anything on the drive....but it indicated that the shell32.dll file (in the c:\windows\system32 directory) was changed

[ranjan2001]

Originally Posted by ronweasley

hi,

[Autorun]
open=MicrosoftPowerPoint.exe
shellexecute=MicrosoftPowerPoint.exe
shell\Auto\command=MicrosoftPowerPoint.exe

Just delete that file which has that code & it will be fine,

[ronweasley]

yeah..i tried that....but that file, and even the other one keeps getting created again......

[ranjan2001]

Originally Posted by ronweasley

yeah..i tried that....but that file, and even the other one keeps getting created again......

Then in folder options UN-check "do not show hidden files" so now u can see all the hidden files & then scan visually in the flash drive you will find some file named MicrosoftPowerPoint.exe delete that too.

That should solve it.

[ronweasley]

yes....tried that too.......in fact..i deleted the files and reinserted the drive...same
next i formatted the drive.....same thing...
the point is...is this a virus? thanx

[Lucky_star]

Its orkutblocker virus.

Restart your comp. in safe mode and use THIS tool.

[ronweasley]

still nothing happened........
downloaded Ad-Aware 2007......full sys scan.....found W32.Hacktool.Winspy > ad-aware's unable to remove the infection nor quarantine..........what next?

[ranjan2001]

u got to find the file named "MicrosoftPowerPoint.exe" on all ur drives.

[a_tif]

powerpoint.exe virus affects pen drives

in my college it keeps roaming on all pc's


use nod32 or kapersky to remove it

if it comes again into ur pen drive , then it is in ur pc, scan ur pc

[codename_romeo]

Use some live cd of linux n then find this powerpoint.exe........ most of my pals had the same problem n it was sorted out by using slax......... try using avast free home edition.... it manages to keep my pc virus free

[a_k_s_h_a_y]

hey if its verion 1 of virus then i think many anti viruses fix it
since its ms powerpointer thing .. just use a anit virus
avast does .. easily

or google search orkut is banned virus or such

i don't think the newer verison of it is out and wide spread... its my stupid senior who wrote that virus
and thus inspired us for version 2 (already out in our college networks)

[ronweasley]

Originally Posted by codename_romeo

Use some live cd of linux n then find this powerpoint.exe........ most of my pals had the same problem n it was sorted out by using slax......... try using avast free home edition.... it manages to keep my pc virus free

yup...that thing worked...............thanks