Virus in Windows XP..pls help

There is a virus in my PC which creates autorun.inf files in all removable drives and pen drives.The anti-virus doesnot detects virus even in safe mode.I installed new Anti virus in safe mode like Norton 2010 provided in November 2009.Tried avast and threatfire after updating.Pls tell how to remove virus.Thanks.
-----------------------------------------
Posted again:
-----------------------------------------
Help needed.
-----------------------------------------
Posted again:
-----------------------------------------
Help me somebody.Please

H

*www.bleuken.com/2008/07/01/preventing-and-removing-autoruninf-virus/

Hope this helps!

I can remove autorun.inf but its created again and also setup.exe...pls help some one..

A

^Did you stop its execution through MSCONFIG->STARTUP??

try avast and go for a boot time scan

Try antivir antivirus

A

Boot into safemode and disable all unwanted startup from msconfig.Also get avast and run a boot-time scan as CA50 said

Test your antivirus efficency :
copy this code in notepad and save as a text file, then rename the file to an exe one. If your AV detects the exe as a virus then your AV is a good one.

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Though this method is not fool proof, yet this will test the efficency of youe current AV.

^^ Norton detects (EICAR test string) and status is high risk!!!!

But why though?
-----------------------------------------
Posted again:
-----------------------------------------
^^ Norton detects (EICAR test string) and status is high risk!!!!

But why though?

A

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Detected Instantly

Gauravs90 said:
^^ Norton detects (EICAR test string) and status is high risk!!!!

But why though?

That piece of code is just for testing not virus.
Anyway norton is good. I tried it with Norton 2010 but didn`t detected it immediately. BTW did your AV detected the virus after on-demand scan or just after renaming. :razz:

-----------------------------------------
Posted again:
-----------------------------------------

Aspire said:
Detected Instantly

What is ur AV :?:

A

^ Kaspersky Internet Security 2009

Aspire said:
^ Kaspersky Internet Security 2009

grt AV then, but did it detect the virus on On-demand scanning or just renaming??
Is just renaming then your AV is not sleeping else it was sleeping and you kow what to do about a sleeping dog

It detected instantly. even i was not able to save it

^ That means NORTON passes the virus detection test.

A

It detected on renaming

i use NOD32 and according to me itz one of the best anti.virus. so try it. :razz:

Aspire said:
It detected on renaming

Though kaspersky is a grt AV, your Av is not detecting a simple piece of code. The resident protection may not be up to the mark. think abt it

-----------------------------------------
Posted again:
-----------------------------------------

evewin89 said:
i use NOD32 and according to me itz one of the best anti.virus. so try it.

hey man Nod32 is a cool piece of code, it even detected the code in txt form. I am using it with Vista. :-o

hi fnds see Nod32 even detected the code in text form, image below
*img36.imageshack.us/img36/2973/nod32p.jpg

CA50 said:
Though kaspersky is a grt AV, your Av is not detecting a simple piece of code. The resident protection may not be up to the mark. think abt it
-----------------------------------------
Posted again:
-----------------------------------------

hey man Nod32 is a cool piece of code, it even detected the code in txt form. I am using it with Vista.

u r rite man...coz one can really trust nod32. i think itz better than most of the well known AV till date

^^ i think norton is the best av till date. and 2010 is really great

evewin89 said:
u r rite man...coz one can really trust nod32. i think itz better than most of the well known AV till date

yep nod32 interface is also cool. I am its fan.

-----------------------------------------
Posted again:
-----------------------------------------

Gauravs90 said:
^^ i think norton is the best av till date. and 2010 is really great

Nortons but past encounter with it was not gud, so i don`t have a taste for it. There are other grt substitutes to norton :razz:

CA50 said:
Nortons but past encounter with it was not gud, so i don`t have a taste for it. There are other grt substitutes to norton

Norton is really changed since 2009 version and it's faster than before.

Gauravs90 said:
Norton is really changed since 2009 version and it's faster than before.

that may be true, but i don`t have any personal interest in norton, i prefer avast and nod32 to norton. I don`t know abt the other members. Every body has got their own taste.

So, has the OP resolved his issue?
If yes, I would like to know how?

R

thetechfreak said:
There is a virus in my PC which creates autorun.inf files in all removable drives and pen drives.The anti-virus doesnot detects virus even in safe mode.I installed new Anti virus in safe mode like Norton 2010 provided in November 2009.Tried avast and threatfire after updating.Pls tell how to remove virus.Thanks.
-----------------------------------------
Posted again:
-----------------------------------------
Help needed.
-----------------------------------------
Posted again:
-----------------------------------------
Help me somebody.Please

An autorun.inf file stores information of an external disk. When ever an external disk is inserted, the computer first checks the autorun.inf file and executes the command written in it. First backup all the stuff in the pendrive and then format it. Then get a usb Panda Antivirus and then netralise the pendrive . It just creates an "autorun.inf" which block any software from overwritting it into the pen drive and no softwares are allowed to enter your pendrive.

hey buddy why don`t you use this software " USB disk security "

*www.zbshareware.com/setup.exe

this software automatcally detects all tpyes of autorun viruses in removable drives including optical ones.

Ok here is my update.I have tried the following antivirus-
Norton 2010
Avast! Antivirus
Kaspersky and
i had done a boot time scan but no use.
Result-I have installed Windows 7 RC1 provided by digit in anniversary issue and its
clean of any virus as of now

try nod32 it may help

Well you had not tried antivirus which are kings in malware detection. They are -

avira antivirus
PC tools antivirus
panda cloud free

they have highest ratings for detection.

Create folders by the names of autorun.inf and setup.exe, and write protect them. This is a quick fix to ensure that at least they don't show up again no matter which antivirus you use. Do this on all your USB drives and hard disks.

Then run a boot time scan. You might lost a lot of data though.

actually there isless posibility of recovering your pc after the virus infection. The solution which myself and other members have provided will work to prevent further virus infection. You can do one thing boot from a live CD and delete the autorun.inf files in all the partition and also detele any other suspicios file. Also check you windows\, system32\. If all these doesn`t work then there is no way other then a clean XP reinstall. Also make sure that you keep your pc uptodate with latest virus updates.

S

Install malwarebytes, Which helps to remove malwares.

J

try kaspersky rescue disk

Thanks everyone for help

well you are not able to delete the autorun virus from your removable drive because its installed on your system. search through the system for the sourch virus and delete it. then finally format or delete manually the autorun vir from your removable drive. it should go.

post a hijack this log here and we may help you more.

-SUDE