Damn You Symantec / Norton

[atifsh]

i was gettin some prompts here n there bout some virus blocked by symantec, i was like wow its working good, then my office computer gave same prompts ... i found amvo.exe in my regedit -run, i deleted that n then i found i cant enable show hidden files..... i checked my home pc and it shows same. other computer i have was using avast, i tried to install defin update using my usb and avast found virus in it, both norton 2007 and symantec didnt. soi uninstalled both and installed avast free on both pc's and it cleaned the virus.

shame on symantec and norton.

now my home pc boots faster too

[Chewy]

Flash drive infections usually involve malware that loads an autorun.inf file into the root folder of all drives (internal, external, removable). When the removable media is inserted, autorun looks for autorun.inf and automatically executes another malicious file to run on your computer. When a flash drive becomes infected, the Trojan will infect a system when the removable media is inserted if autorun has not been disabled.

Please insert your flash drive. Hold down the Shift key when inserting the drive until Windows detects it to bypass the autorun feature and keep autorun.inf from executing automatically.

Please download Flash_Disinfector.exe by sUBs and save it to your desktop.
Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.
Wait until it has finished scanning and then exit the program.
Reboot your computer when done.
Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive that is plugged in when you ran it. Don't delete this folder...it will help protect your drives from future infection.

Keeping Autorun enabled on USB and other removable drives has become a significant security risk due to the increasing number of malware variants that can infect them and transfer the infection to your computer. Read Danger USB! Worm targets removable memory sticks.

You can hold down the Shift key when inserting the drive into your computer until Windows detects it to keep autorun.inf from executing automatically. However, I recommend disabling the Autorun feature feature on USB and removable drives as a method of prevention. This should keep the malicious file from automatically running upon insertion and infecting your system while allowing you to safely perform a scan.

http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe

[atifsh]

very informative, thnks... i didnt knew shift thingy, will help a lot.

but strange free avast can detect the virus, but 2 separate products from symantec and Norton cant.

[Chewy]

all my drives are immunized

I got an infection from another computer I used my usb drive to transfer fixes to

[atifsh]

same here, i found the source, someone used my pc at office and though norton prompts that it has virus and cleaned everything but this which is little newer. virus first showed in march 08, [thats what iv found frm web / symantec] and very smart as its autorun doesnt show any signs that ur harddrive has it.

iv cleaned all pc's even her USB, but asked her not to use on my pc as i know she will get it again frm her pc or whatever place she got it.

[Chewy]

did you notice the

lpt3.This folder was created by Flash_Disinfector

on each partition?

[atifsh]

yes in autorun.inf folder, ...

[Chewy]

My usb drive used to always try to autoplay no matter what setting I used in windows

no more

[atifsh]

well i had set dont open when it prompts everytime and my usb was not auto running before on office pc but was default to open at home.

another program that helped me removing the hidden autorun and vbat.bat files was explorerxp when i cant enable show hidden files.



got another problem asked my 2.5 year son to put my USB on computer table and he did that his own way thats throwing it on table, i was like ok i will find it in the morning but now i cant find it .

[atifsh]

ok i run S & D and found many cookies but one reg entry, hope it was just the leftover of something i had.... win32.Rungbu.a

[Chewy]

http://www.malwarebytes.org/mbam.php

post a log

[atifsh]

Malwarebytes' Anti-Malware 1.14
Database version: 816

2:25:30 PM 6/3/2008
mbam-log-6-3-2008 (14-25-30).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 142581
Time elapsed: 33 minute(s), 1 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[Chewy]

avast and avira are good AV's

[atifsh]

im really impressed with avast 4.8 home, its free but works perfect, didnt liked avg 7.5 it was awful, missed a lot of viruses, a useless crap, maybe new ver 8 they made it better. but its a crippled version of their payed.
but avast has almost everything in free except script blocking.