1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive ~Secure folder & Autorun.inf creation virus

Discussion in 'Malware and Virus Removal Archive' started by FuzMic, 2011/06/01.

  1. 2011/06/01
    FuzMic

    FuzMic Well-Known Member Thread Starter

    Joined:
    2006/05/25
    Messages:
    512
    Likes Received:
    5
    [Inactive] ~Secure folder & Autorun.inf creation virus

    Hi friends

    I have an pc with xpwin.sp3, every time i insert ANY pendrive to it, the free avira antivirus will block the same virus. However at that time a folder ~Secure and a file autorun.inf will be created in the root directory of the pendrive. These 2 items can be deleted.

    The PC is already protected by spybot and fully checked with malwarebyte's antimalware.

    I had a look at the start up programs and cannot see any suspicious rouge.

    Any pointers, thanks.
     
    Last edited: 2011/06/01
    FuzMic,
    #1
  2. 2011/06/01
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Please, complete all steps listed here: this post

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running tools or applying updates other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.
     
    broni,
    #2


  3. to hide this advert.

  4. 2011/06/02
    FuzMic

    FuzMic Well-Known Member Thread Starter

    Joined:
    2006/05/25
    Messages:
    512
    Likes Received:
    5
    Broni

    I removed the Free Avira AntiVirus and replaced by Security Essentials, then it caught the rouge. Will report what virus it was later & then will set this thread as resolved.

    Thanks anyway.
     
    FuzMic,
    #3
  5. 2011/06/02
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    I strongly suggest, you follow my previous reply, but it'll be up to you.
     
    broni,
    #4
  6. 2011/06/02
    FuzMic

    FuzMic Well-Known Member Thread Starter

    Joined:
    2006/05/25
    Messages:
    512
    Likes Received:
    5
    Thanks for the advice! but i think it is ok, security essential caught the following
    Trojan: Ircbrute, FakeSysDef
    TrojanDownloader: Chepvil.K
    Worm: Slenfbot
    BackDoor: Tofsee.I
     
    FuzMic,
    #5
  7. 2011/06/02
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Good luck then :)
     
    broni,
    #6

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...