DIGIT-ARC read-only archive · snapshot: July 23, 2026

Virus Found: Cant delete it.

16 posts · originally from https://geek.digit.in/community/threads/virus-found-cant-delete-it.76170/

Anindya
Anindya Original post #1
Dec 20, 2007 at 12:46 PM
I use Avast Antivirus with lastest updates. A virus with this name has been found -"INF:Autorun-F [Trj]" in c: and subsequently infected all the drives.

i have tried all the knows methods to remove it, but without any result.
1) Scanned drives, av deleted it. But again the virus came back.
2)Scheduled boot time scan, av deleted it. But again the virus came back.
3)Opened command prompt, deleted it from there. But again the virus came back.
4)Rebooted in Safe Mode but couldnt find the virus and it was found there also by the av.
5) Rebooted in Safe Mode with CMD but didnt get it as i have already deleted it. But it was present, as the av detected it.

The main problem is "Show hidden files" option is not getting activated, so that i can delete it.
Screenshot -

[URL=*img172.imageshack.us/my.php?image=virusoy2.jpg][IMG]*img172.imageshack.us/img172/9875/virusoy2.th.jpg[/URL][/IMG]

Now plz tell me what to do with it? Thanks
Batistabomb
Dec 20, 2007 at 12:50 PM
schedule a bootscan for avast this is a small autorun worm, then you will identify yourselves all those malicious things, so you can delete them by handy simply by means of keys 1 to 9
anandk
anandk #3
Dec 20, 2007 at 6:30 PM
Disable system Restore. Use Disk Cleaner to clear old Restore Points. Run CCleaner. Then try all above again.
Anindya
Anindya #4
Dec 20, 2007 at 8:31 PM
Batistabomb said:
schedule a bootscan for avast this is a small autorun worm, then you will identify yourselves all those malicious things, so you can delete them by handy simply by means of keys 1 to 9

I think u missed that point no 3 in my post!:p

Thanks Anand will try as u suggested.
skeletor
Dec 20, 2007 at 9:40 PM
Try using the trial version Trojan Hunter for removing it.
zyberboy
Dec 20, 2007 at 10:03 PM
download kav 6 trial version update it and do scan, it will fix it.
Anindya
Anindya #8
Dec 20, 2007 at 10:29 PM
Thanks guys for replies. I use a dial-up connection so need to think twice before downloading.

@Anandk the process mentioned by u did not work.
I scheduled a boottime scan again and nothing was found there. But in desktop it started detecting again. This is really a strange problem.
Plz suggest me what to do next
zyberboy
Dec 20, 2007 at 10:36 PM
gagandeep said:
^^ KAV 6 days have gone. Download Kaspersky Anti-Virus 7. ;)
www.kaspersky.com
yea sure but kav 6 is much faster and lighter than version 7

@Anindya
try kav 6 yaar
arun77574
arun77574 #10
Dec 21, 2007 at 12:15 AM
I use KAV 6 and it detects the same Autorun.inf virus whenever i plug in my frnds pendrive., he does not have a net connection and thats a different story. "KAV6" will defeniately remove it 100%. Why KAV6?... Because its size is only 19.5mb, its very light and does not consume much of your system resources.

I can give you the same version which i'm using with key if you want.
its ver 6.0.1.411
johnjjx
johnjjx #11
Dec 21, 2007 at 12:25 AM
use dis
*en.sergiwa.com/modules/mydownloads/singlefile.php?cid=2&lid=1
only 70kb.:D
i hope dis will help it removes all restrictions tht virus removes:D ;)
like taskmanager, regedit, n ofcourse folderoptions.:p
ABHISEK KUMAR ROUT
Dec 23, 2007 at 12:51 PM
Well I think its not the autorun.inf which is the main culprit...the file is being executed by an .exe file from inside the system32..do 1 thing,as I think it 2 be an avpo.exe..go into the cmd,then trace into sys32,type dir /a avpo*.*..if U find any file related 2 it then change its attribute & delete...the get into ur drive(in cmd)& del that autorun stuff..let me know if it works or not
src2206
src2206 #14
Dec 23, 2007 at 1:21 PM
Download HijackThis version 1.9.1 (you should get it in Filehippo. Then let it scan your PC and save a log file. Post that log in forums dedicated to analyze HJT logs, like Techsupportforum.com, Safernetworkingforum or Majorgeeks. Deleting anything using HJT is not really the best of the ideas andthe online HJT log checker is also not conclusive.
praka123
praka123 #15
Dec 23, 2007 at 1:51 PM
if u know the location where the virus while is kept,boot from a linux livecd and remove it!
Anindya
Anindya #16
Dec 23, 2007 at 10:31 PM
Thanks for all ur help. The problem is solved. I got KAV from Arun and it could detect it after update.