Virus?
- Thread starter Xpire
- Start date
ceewi1
VIP Member
Sorry about the delay.
The File:: section doesn't indicate that the files have been detected - it's just the files you've asked combofix to delete via the CFScript.txt file. If it had detected and deleted the files they would appear in the Other Deletions section.
The entries for the offending files no longer appear, your log appears to be clean. The infected flash drive isn't one of the ones you've posted, though.
The File:: section doesn't indicate that the files have been detected - it's just the files you've asked combofix to delete via the CFScript.txt file. If it had detected and deleted the files they would appear in the Other Deletions section.
The entries for the offending files no longer appear, your log appears to be clean. The infected flash drive isn't one of the ones you've posted, though.
Hi again guys,
Sorry about this but its been frustrating me a bit...
Everytime i insert my flash drive into my laptop, it doesn't let me open it.
Once i run the ComboFix with the script that John McKenna provided, everything is fixed but only temporarily. Once i restart or re-insert my usb drive. It doesn't work again...
Does anyone know a permanent fix to the 'usb drive infection'?
Here's a copy of my latest combofix log:
Combofix.txt
Sorry about this but its been frustrating me a bit...
Everytime i insert my flash drive into my laptop, it doesn't let me open it.
Once i run the ComboFix with the script that John McKenna provided, everything is fixed but only temporarily. Once i restart or re-insert my usb drive. It doesn't work again...
Does anyone know a permanent fix to the 'usb drive infection'?
Here's a copy of my latest combofix log:
Combofix.txt
ceewi1
VIP Member
What exactly happens when you try to open up the drive?
Try this:
Look for a file called autorun.inf on the root of each drive, particularly the flash drive. If it's found, post the contents here and delete it.
Next, download and run this file: http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe
Finally, run Notepad and paste the contents of the codebox into a new file. Please do not include the word Code:
Save the file to the desktop as fix.reg and make sure the "Save as Type" field says "All Files". Then please go to the desktop and double-click on fix.reg, and click Yes to merge it with the registry.
Restart, and try accessing the flash drive again.
Try this:
Look for a file called autorun.inf on the root of each drive, particularly the flash drive. If it's found, post the contents here and delete it.
Next, download and run this file: http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe
Finally, run Notepad and paste the contents of the codebox into a new file. Please do not include the word Code:
Code:
REGEDIT4
[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2]Save the file to the desktop as fix.reg and make sure the "Save as Type" field says "All Files". Then please go to the desktop and double-click on fix.reg, and click Yes to merge it with the registry.
Restart, and try accessing the flash drive again.
Hi,
Sorry i didn't follow your steps in order. I actually ran the disinfector first. After running the disinfector the usb worked fine.
It seems as though my usb is permanently fine now, however if i plug in other usb's that haven't been inside my computer before, they get affected immediately... as if my hdd is the one that is infected.
Within the contents of my autorun file was this:
[AutoRun]
open=oxbvpen.exe
shellexecute=oxbvpen.exe
shell\Auto\command=oxbvpen.exe
Thanks!
Sorry i didn't follow your steps in order. I actually ran the disinfector first. After running the disinfector the usb worked fine.
It seems as though my usb is permanently fine now, however if i plug in other usb's that haven't been inside my computer before, they get affected immediately... as if my hdd is the one that is infected.
Within the contents of my autorun file was this:
[AutoRun]
open=oxbvpen.exe
shellexecute=oxbvpen.exe
shell\Auto\command=oxbvpen.exe
Thanks!
ceewi1
VIP Member
Let's get some more information.
Go to Kaspersky Online Scanner and click Accept
When the updates are finished downloading, click Next>>Scan Settings
Under Scan using the following antivirus database:, select extended
Make sure the Scan Archives and Scan Mail Bases options are selected as well. Click OK
Click My Computer and wait for the scan to finish
Click Save Report As. Under Save as type:, select Text file. Save this log to your Desktop and post a copy of it here.
Please also double click on Combofix.exe to have it generate a new log and post that log here
Go to Kaspersky Online Scanner and click Accept
When the updates are finished downloading, click Next>>Scan Settings
Under Scan using the following antivirus database:, select extended
Make sure the Scan Archives and Scan Mail Bases options are selected as well. Click OK
Click My Computer and wait for the scan to finish
Click Save Report As. Under Save as type:, select Text file. Save this log to your Desktop and post a copy of it here.
Please also double click on Combofix.exe to have it generate a new log and post that log here