Welcome Guest ( Log In | Register )

Bump Topic Topic Closed RSS Feed

Outline · [ Standard ] · Linear+

 what is this?, print screen provided. help needed.

views
     
TSblackflam
post Mar 5 2007, 01:10 AM, updated 19y ago

Getting Started
**
Junior Member
183 posts

Joined: May 2005


Quick help needed, I do not know where to search for help... so I try my luck here. hopefully lowyat forum members can lend me a hand.

My system is infected with virus/trojan. I am not able to double click on my local drives, instead, I have to right click and choose "open". Everytime I double click on any of my local drives, my antivirus will show *print screen provided*. Is this trojan or virus? Sometimes it uses up all my system resources.. makes my system very unresponsive.

I used AVG, BitDefender 10, Lavasoft Ad-Adware, RegistryFix, even System Mechanic pro to check my system... but all of them showing no sign of problem at all. Yet, I am still have problem accessing those drives.

Reformat? Only reformatted 1 partition, which is the OS drive. I hope to keep my animes and mp3.. it's up to 500gb worth of data. I am not able to backup all of them. The problem still persist. Reformatting everything is the last resort. cry.gif

extra info:
I have 3 hard drives in my cpu. total 8 partitions drives. I've copied some anime from friend, and problem started to show up.

anything else I can do beside reformat all my 3 drives? icon_question.gif

TSblackflam
post Mar 5 2007, 09:11 AM

Getting Started
**
Junior Member
183 posts

Joined: May 2005


UPDATE:

Guys, I found that virus/trojan!! I was backing up my data and I found "autorun.inf" and "pet.exe" in each of the drives *picture provided*. I delete it by pressing "del".. it restored back immediately. I did this from the Nero Burning window mode. What I mean is, when you burn data, you have to choose location and select particular file to burn, right? I found the trojan from that window. But when I access it through My Computer, nothing found. I have enabled hidden files.

Is there any other way I can access the "autorun.inf" ? What should I do next?



This post has been edited by blackflam: Mar 5 2007, 10:13 AM
TSblackflam
post Mar 5 2007, 07:42 PM

Getting Started
**
Junior Member
183 posts

Joined: May 2005


QUOTE(LovesReborn @ Mar 5 2007, 04:45 PM)
download and run flash disinfector here.
all the best...
*
That only works with flashdrives right? All my flash drives have been disinfected.


Added on March 5, 2007, 7:47 pm
QUOTE(eXPeri3nc3 @ Mar 5 2007, 04:54 PM)
Try saving this and run it on your desktop.
http://www.kellys-korner-xp.com/regs_edits...whiddenexts.vbs

Try to find that pet32.exe now.
*
Double clicked and Logoff/Logon... followed exact instruction. Nothing worked. Pet32.exe still exist, it restored back automatically everytime I delete it sad.gif I am able to get rid of autorun.inf by creating another "autorun.inf" folder in the each of the root drives though.. but I still cannot access all the local drives.

This post has been edited by blackflam: Mar 5 2007, 07:47 PM
TSblackflam
post Mar 5 2007, 09:32 PM

Getting Started
**
Junior Member
183 posts

Joined: May 2005


that's weird. I double checked my flash drives (which has been disinfected). The PET32.EXE and autorun.inf still exist... sad.gif

another victim added into list.. my girlfriend. she plug her flash drive into my system...I've forgotten to tell her :S Now her laptop also got infected.
TSblackflam
post Mar 9 2007, 07:06 PM

Getting Started
**
Junior Member
183 posts

Joined: May 2005


hi guys... I've successfully remove this trojan.

1) I run "kill autorun".
2) restart computer and I see all hidden files. all "PET32.exe" file were found.
3) reboot system into safe mode
4) delete it. make sure all root drive were clean
5) restart into normal booting mood... ta daaa!

rclxm9.gif ouh yeah

Topic ClosedOptions
 

Change to:
| Lo-Fi Version
0.0162sec    0.51    6 queries    GZIP Disabled
Time is now: 22nd December 2025 - 01:08 PM