littlewhitey's Servers Forum (SA-MP/VC-MP/MTA/Zomboid)

Other => Off-Topic => Technical Support => Topic started by: [Cheetos] on September 03, 2010, 10:23:42 AM

Title: How do i remove autorun virus?!
Post by: [Cheetos] on September 03, 2010, 10:23:42 AM
hey
i saw that i got the autorun virus in my PC i tried nod32 to remove it but it getting back in 2 mins and i got no idea wtf happning so if anyone of u got an idea about let me know!

P.S: dont reply here if u dont have any idea about the subject!!!
Title: Re: How do i remove autorun virus?!
Post by: S3rs on September 03, 2010, 10:29:23 AM
lol just scan your bootfiles.
locate it.
remove it.
Title: Re: How do i remove autorun virus?!
Post by: [Cheetos] on September 03, 2010, 10:30:55 AM
lol just scan your bootfiles
antivirus cant stop autorun.inf work
i googled it and i think there is special tool to remove it
Title: Re: How do i remove autorun virus?!
Post by: S3rs on September 03, 2010, 10:37:05 AM
Yeah, but make sure you read about those tools, some of them are really dumb.
I once used one (don't remember the name, but i'd recognise it immediately) which scanned one of my bootfiles as a virus - I couldnt acces my computer and had to format it. 8)
Title: Re: How do i remove autorun virus?!
Post by: [Cheetos] on September 03, 2010, 10:45:43 AM
Yeah, but make sure you read about those tools, some of them are really dumb.
I once used one (don't remember the name, but i'd recognise it immediately) which scanned one of my bootfiles as a virus - I couldnt acces my computer and had to format it. 8)
ye but formtting wont remove the virus even system restore
im sick of this [V] member in my PC :'(
Title: Re: How do i remove autorun virus?!
Post by: ankit on September 03, 2010, 11:00:11 AM
Actually i do have an Autorun virus remover. May be this will help you. I am uploading it for you now
http://www.mediafire.com/file/yed7u8koudbwbq6/Portable%20Autorun%20Virus%20Remover_-ag112.rar (http://www.mediafire.com/file/yed7u8koudbwbq6/Portable%20Autorun%20Virus%20Remover_-ag112.rar)

Just extract the downloaded file, and there will be exe program named AutorunRemover start that. Then select the drives and scan. It will help.
Title: Re: How do i remove autorun virus?!
Post by: [Cheetos] on September 03, 2010, 11:16:41 AM
Actually i do have an Autorun virus remover. May be this will help you. I am uploading it for you now
http://www.mediafire.com/file/yed7u8koudbwbq6/Portable%20Autorun%20Virus%20Remover_-ag112.rar (http://www.mediafire.com/file/yed7u8koudbwbq6/Portable%20Autorun%20Virus%20Remover_-ag112.rar)

Just extract the downloaded file, and there will be exe program named AutorunRemover start that. Then select the drives and scan. It will help.
thank u , i downloaded and scanned and it gives me
 
Quote
C:\  no threat found
D:\  no threat found




Scan complete successfully
so i donnu if this means that virus has been removed or what
also it detected new virus named userint.exe something like this donnu about
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 03, 2010, 11:26:11 AM
Download avast! and run bootscan!  ;)
Title: Re: How do i remove autorun virus?!
Post by: [Cheetos] on September 03, 2010, 02:20:50 PM
Download avast! and run bootscan!  ;)
anti virus softwears doesnt work with this kind of viruses i guess
Title: Re: How do i remove autorun virus?!
Post by: iMJets on September 03, 2010, 02:22:47 PM
i had a horrible virus that would not let me open anything so i shut down and went back a few days and then it was gone  :)
edit: just saw u said this wouldnt work opps rofl
Title: Re: How do i remove autorun virus?!
Post by: Simon on September 03, 2010, 02:31:36 PM
What's NOD32 calling the virus? Have you tried booting in safemode (http://www.computerhope.com/issues/chsafe.htm) and doing your scans in that? If your scans still can't delete it in safemode then try Malwarebytes' Anti-Malware (http://www.malwarebytes.org/mbam.php), it's a pretty nifty piece of software... if it still fails then you'll need some sort of pre-boot antivirus scanner.
Title: Re: How do i remove autorun virus?!
Post by: [Cheetos] on September 03, 2010, 02:49:05 PM
Quote
9/3/2010 13:18:53   Real-time file system protection   file   C:\WINDOWS\system32\userinit.exe   Win32/TrojanDownloader.Delf.POH trojan   unable to clean   NT AUTHORITY\SYSTEM   Event occurred during an attempt to run the file by the application: C:\WINDOWS\Explorer.EXE.
9/3/2010 13:18:50   Real-time file system protection   file   C:\WINDOWS\system32\userinit.exe   Win32/TrojanDownloader.Delf.POH trojan   unable to clean   NT AUTHORITY\SYSTEM   Event occurred during an attempt to access the file by the application: C:\WINDOWS\Explorer.EXE.

it gives 26 files like this and it cant be deleted in safe mode i'll try the softwear now.
btw i just noticed new procces in my pc calls svcnost.exe and it detected as trojan in nod32 is there any relation to the virus with this file?
Title: Re: How do i remove autorun virus?!
Post by: ankit on September 03, 2010, 02:54:52 PM
Quote
9/3/2010 13:18:53   Real-time file system protection   file   C:\WINDOWS\system32\userinit.exe   Win32/TrojanDownloader.Delf.POH trojan   unable to clean   NT AUTHORITY\SYSTEM   Event occurred during an attempt to run the file by the application: C:\WINDOWS\Explorer.EXE.
9/3/2010 13:18:50   Real-time file system protection   file   C:\WINDOWS\system32\userinit.exe   Win32/TrojanDownloader.Delf.POH trojan   unable to clean   NT AUTHORITY\SYSTEM   Event occurred during an attempt to access the file by the application: C:\WINDOWS\Explorer.EXE.

it gives 26 files like this and it cant be deleted in safe mode i'll try the softwear now.
btw i just noticed new procces in my pc calls svcnost.exe and it detected as trojan in nod32 is there any relation to the virus with this file?

Well, if u are unable to delete those files. You can try this here (http://fs23.filehippo.com/9632/fb10ef95e3344b8bb28db1b2f239dceb/unlocker1.9.0.exe).
It deletes all undeletable files by ending processe running or using that files.
Title: Re: How do i remove autorun virus?!
Post by: [Cheetos] on September 03, 2010, 03:00:14 PM
Quote
9/3/2010 13:18:53   Real-time file system protection   file   C:\WINDOWS\system32\userinit.exe   Win32/TrojanDownloader.Delf.POH trojan   unable to clean   NT AUTHORITY\SYSTEM   Event occurred during an attempt to run the file by the application: C:\WINDOWS\Explorer.EXE.
9/3/2010 13:18:50   Real-time file system protection   file   C:\WINDOWS\system32\userinit.exe   Win32/TrojanDownloader.Delf.POH trojan   unable to clean   NT AUTHORITY\SYSTEM   Event occurred during an attempt to access the file by the application: C:\WINDOWS\Explorer.EXE.

it gives 26 files like this and it cant be deleted in safe mode i'll try the softwear now.
btw i just noticed new procces in my pc calls svcnost.exe and it detected as trojan in nod32 is there any relation to the virus with this file?

Well, if u are unable to delete those files. You can try this here (http://fs23.filehippo.com/9632/fb10ef95e3344b8bb28db1b2f239dceb/unlocker1.9.0.exe).
It deletes all undeletable files by ending processe running or using that files.

i have it hardy and it doesnt help at all , i can delete them without it but those files back in my pc in 2 mins
Title: Re: How do i remove autorun virus?!
Post by: Alvar on September 03, 2010, 03:18:03 PM
Burn your PC!
Title: Re: How do i remove autorun virus?!
Post by: [Cheetos] on September 03, 2010, 03:23:25 PM
Burn your PC!
>:( i wont doit till my PC burn itself
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 03, 2010, 04:18:17 PM
Like I said... avast! antivirus...run "boot time scan" !
Btw. forgot to ask...does that virus shows when u are offline?
If there is nothing when u are not connected to internet than It should be easy...with avast! (boot time scan)
If that thing shows only when u are connected...than download PC TOOLS ANTIVIRUS FREE! And run complete scan...or something...lol!

btw. NOD32 sux....  8)
Title: Re: How do i remove autorun virus?!
Post by: iou on September 03, 2010, 04:24:22 PM
You got a Trojan.Downloader
However, it's not very easy to know which, or where to look when you don't know when it happened.

Have you tried: msconfig > startup > look for files which are suspicious (it's relatively easy to find if you've had viruses before).
You could then google the file names (eg. ultrahax.exe) you find suspicious, your results should be several websites which declares if it's a virus or not.

About the Trojan.Downloader: it's a really tiny file that could either come from a website (unnoticed download by being compressed inside an image or .ico file), or an installation of an application.
It puts itself on the startup list, and downloads updated malware.
There are two reasons to why they keep appearing, one is the above.
Second, it's still on startup, but it's a process, which constantly checks if their files (viruses etc..) exists.
If it doesn't, he goes "let's re-extract them from myself, wohoo!".

Safe Mode + Full admin-right scan with Avira Antivir, Malwarebytes Anti Malware, NOD32, AVG should be able to fix it.
If it doesn't, try the msconfig I tipped you about.

As for everyone else screaming "boot scan!"...
No, this isn't an error in the boot section, as his operating system loads, OH WELL.
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 03, 2010, 04:32:14 PM
Avira Antivir-Pretty cool but can suck @ ip attacks
Malwarebytes Anti Malware-Pretty useless
NOD32-Sux bigtime + delete windows files=windows crash
AVG-on top of my list of worst antiviruses...ever,and do same shits as NOD32(old ones were ok...)

I recommend:  -Avast! 4.7 Home
                        -Pc Tools Antivirus Free
                       -Spybot S&D


 8)
Title: Re: How do i remove autorun virus?!
Post by: [Cheetos] on September 03, 2010, 04:48:34 PM
You got a Trojan.Downloader
However, it's not very easy to know which, or where to look when you don't know when it happened.

Have you tried: msconfig > startup > look for files which are suspicious (it's relatively easy to find if you've had viruses before).
You could then google the file names (eg. ultrahax.exe) you find suspicious, your results should be several websites which declares if it's a virus or not.

About the Trojan.Downloader: it's a really tiny file that could either come from a website (unnoticed download by being compressed inside an image or .ico file), or an installation of an application.
It puts itself on the startup list, and downloads updated malware.
There are two reasons to why they keep appearing, one is the above.
Second, it's still on startup, but it's a process, which constantly checks if their files (viruses etc..) exists.
If it doesn't, he goes "let's re-extract them from myself, wohoo!".

Safe Mode + Full admin-right scan with Avira Antivir, Malwarebytes Anti Malware, NOD32, AVG should be able to fix it.
If it doesn't, try the msconfig I tipped you about.

As for everyone else screaming "boot scan!"...
No, this isn't an error in the boot section, as his operating system loads, OH WELL.

so that trojan.downloader is downloading the viruses when i delete it?
and i saw this abdo.exe in the startup list i didnt saw it b4 and it doesnt appears in the procces list or svcnost.exe i guees
Title: Re: How do i remove autorun virus?!
Post by: Huggy on September 03, 2010, 05:38:59 PM
hi chetoos
download kaspersky boot tools or any anti-virus boot tools and burn it in cd then run it and clean all ur HDD
if it not work dowload kaspersky anti-virus free and update it then run into a safemode and scan all ur pc then format ur pc immediately (that my way when i have a bad virus in my pc)
and gl m8 ;)
Title: Re: How do i remove autorun virus?!
Post by: [eVo]Rizla on September 03, 2010, 06:30:57 PM
Avira Antivir-Pretty cool but can suck @ ip attacks
Malwarebytes Anti Malware-Pretty useless
NOD32-Sux bigtime + delete windows files=windows crash
AVG-on top of my list of worst antiviruses...ever,and do same shits as NOD32(old ones were ok...)


I recommend:  -Avast! 4.7 Home
                        -Pc Tools Antivirus Free
                       -Spybot S&D


 8)

wtf? no antivirus deletes essential windows files causing crashes...

NOD32 is a solid and reliable AV but u must pay for it.

AVG was once the best free antivirus u could have, i dont know about now, dont use it. and malwarebytes is really pretty handy...ip attacks? O_o

@ cheetos - reinstall windows and stay off the dodgy porn sites
Title: Re: How do i remove autorun virus?!
Post by: [eVo]Rizla on September 03, 2010, 06:32:21 PM
U should also run hijackthis and post a log here, or pm me it and ill have a look. DO NOT make any changes using hijackthis
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 03, 2010, 08:25:19 PM
lol...NUBZ!  :P :P

anyway...try like I said...cuz I had same problem...and Nod32,AVG...or any other "world most popular downloads" antivirus couldnt fix my problem!

So...download avast! 4.7 and run boot time scan!
If that wont work...install PC Tools Antivirus Free! And it will fix it ... 100% !
I wouldnt be here talking this if I dont have any experience in removing hardcore viruses from my and others pc`s! like this one...  8)

Btw. 1 simple question 4 all u pros here... :
Whats the problem when u have virus on ur computer that cant be deleted(in your opinion)...than u format partition and install fresh copy of windows(original) ...but the problem is still there! I mean VIRUS!  ;)
Title: Re: How do i remove autorun virus?!
Post by: [Cheetos] on September 04, 2010, 02:12:22 PM
i just deleted the C disk with all windows and installed new one
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 04, 2010, 06:01:39 PM
i just deleted the C disk with all windows and installed new one
  :o lolz...virus still there?
Title: Re: How do i remove autorun virus?!
Post by: [Cheetos] on September 04, 2010, 07:59:09 PM
i just deleted the C disk with all windows and installed new one
  :o lolz...virus still there?
seems not ,lool
but i lost my sound card file and cant restore it :(
got an idea about?
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 04, 2010, 08:17:49 PM
seems not ,lool
but i lost my sound card file and cant restore it :(
got an idea about?
ok lolz...! What sound card file? U mean like sound drivers? If yes...use ur pc cd with drivers if u still have it...if not,download drivers from internet! If u dont know how,ask me!  ;)
Title: Re: How do i remove autorun virus?!
Post by: [Cheetos] on September 05, 2010, 05:47:00 PM
i had realtek b4 formatting i dont know if it changed after i formated my pc also it doesnt installed from the CD i used to format
i dont know what to do plz help  :(
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 05, 2010, 06:07:05 PM
i had realtek b4 formatting i dont know if it changed after i formated my pc also it doesnt installed from the CD i used to format
i dont know what to do plz help  :(
lol...if u dont have cd that came with ur pc...than u need to download drivers from internet...its easy!
Just check whats ur motherboard name and stuff...and simply google "realtek sound drivers" ! Thats all!  ;)
Download drivers,install them,restart ur pc(if needed) and sound will be there!  8)

Oh...and btw. cd u used to format and install windows...drivers are not there...u need cd that u got when u buy ur pc...thats "motherboard cd"...or something lol!

and btw. hit me on MSN if u want...so we can talk faster! lol
Title: Re: How do i remove autorun virus?!
Post by: Me[T]aL_ on September 05, 2010, 08:27:40 PM
i had the same problem with sound and did what devilboy said and it worked to :P
Title: Re: How do i remove autorun virus?!
Post by: Fuse on September 05, 2010, 08:53:01 PM
Copy all of your important files to an external drive and reformat the computer
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 05, 2010, 10:50:41 PM
Copy all of your important files to an external drive and reformat the computer
  :o
Title: Re: How do i remove autorun virus?!
Post by: Champion on September 06, 2010, 12:24:28 AM
Delete system32.
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 06, 2010, 01:50:10 AM
Delete system32.
  :o
now that was just...funny!  ;D
btw.u cant delete system32 !  ;)
Title: Re: How do i remove autorun virus?!
Post by: Huggy on September 06, 2010, 03:03:01 AM
i just deleted the C disk with all windows and installed new one
  :o lolz...virus still there?
seems not ,lool
but i lost my sound card file and cant restore it :(
got an idea about?
use that site :http://www.touslesdrivers.com/index.php?v_page=29 (http://www.touslesdrivers.com/index.php?v_page=29) and install the plugin and click on lance detection wait some sec and it will show u all the drivers u have and the update version of it
so search for ur  sound card driver , click on it, then press download and install it ;)
gl in that
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 06, 2010, 03:09:43 AM
i just deleted the C disk with all windows and installed new one
  :o lolz...virus still there?
seems not ,lool
but i lost my sound card file and cant restore it :(
got an idea about?
use that site :http://www.touslesdrivers.com/index.php?v_page=29 (http://www.touslesdrivers.com/index.php?v_page=29) and install the plugin and click on lance detection wait some sec and it will show u all the drivers u have and the update version of it
so search for ur  sound card driver , click on it, then press download and install it ;)
gl in that
...
or complicate ur life with that!  ;D
Title: Re: How do i remove autorun virus?!
Post by: Huggy on September 06, 2010, 04:33:13 AM
i just deleted the C disk with all windows and installed new one
  :o lolz...virus still there?
seems not ,lool
but i lost my sound card file and cant restore it :(
got an idea about?
use that site :http://www.touslesdrivers.com/index.php?v_page=29 (http://www.touslesdrivers.com/index.php?v_page=29) and install the plugin and click on lance detection wait some sec and it will show u all the drivers u have and the update version of it
so search for ur  sound card driver , click on it, then press download and install it ;)
gl in that
...
or complicate ur life with that!  ;D
nah it easy and it give u the last driver update
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 06, 2010, 04:55:38 AM
nah it easy and it give u the last driver update
...well...yeah,but its not secure...kinda! its easier to open device menager and update hardware drivers from there! ;)
Nothing detects itself better,than ...itself!  ;D lol...thought of the year...by: Me!  8)

I mean...windows detects better and safer than some net page or some program...!
Title: Re: How do i remove autorun virus?!
Post by: Fuse on September 06, 2010, 01:52:23 PM
Copy all of your important files to an external drive and reformat the computer
  :o
For a couple of weeks ago i got some virus wrapped in to a driver,
the driver installed everytime i logged in, which was a virus, and caused blue screen..
Over and over again.

So i just reformated it and it now works.
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 06, 2010, 04:30:17 PM
For a couple of weeks ago i got some virus wrapped in to a driver,
the driver installed everytime i logged in, which was a virus, and caused blue screen..
Over and over again.

So i just reformated it and it now works.
  ;D That is not a virus...lolz ;D
Title: Re: How do i remove autorun virus?!
Post by: [eVo]Rizla on September 06, 2010, 05:32:42 PM
oh my ..
Title: Re: How do i remove autorun virus?!
Post by: Fuse on September 06, 2010, 06:59:53 PM
For a couple of weeks ago i got some virus wrapped in to a driver,
the driver installed everytime i logged in, which was a virus, and caused blue screen..
Over and over again.

So i just reformated it and it now works.
  ;D That is not a virus...lolz ;D
Sorry for offtopic but what do you mean by that?
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 06, 2010, 07:34:49 PM
Sorry for offtopic but what do you mean by that?
I mean what I said!  8)

Ok ill be good this time... Learn to install proper drivers for proper hardware ...than call it "Virus"!
...Better? ok..bb!
Title: Re: How do i remove autorun virus?!
Post by: Fuse on September 06, 2010, 10:09:19 PM
ffs it was a fake alcohol 120 from piratebay, sheez. :)
Title: Re: How do i remove autorun virus?!
Post by: [Cheetos] on September 07, 2010, 09:23:38 PM
No sound in my pc yet
any1 can help?
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 07, 2010, 10:47:48 PM
msn?  ;)
Title: Re: How do i remove autorun virus?!
Post by: n1K on September 08, 2010, 07:57:40 AM
Get a software like driver checker, ask me on msn, i have one, it scans all the unavailable drivers in your pc for your hardware and then downloads them from its server and installs them by itself, it also helps in updating old drivers!
Title: Re: How do i remove autorun virus?!
Post by: [Cheetos] on September 08, 2010, 08:06:12 AM
i updated the sound driver files but it doesnt help
Title: Re: How do i remove autorun virus?!
Post by: n1K on September 08, 2010, 11:50:04 AM
i still advise to use driver checker as you may have installed wrong drivers for your hardware!
Title: Re: How do i remove autorun virus?!
Post by: Devilboy665 on September 08, 2010, 11:52:58 AM
Driver Detective and other similar stuff sux!  :P
Dude...simply google Realtek Audio Drivers! In Your Case search for "AC97 Audio Drivers" !  ;)