strange autorun.inf file in every drive

I

iz0nlee

I found a autorun.inf file in each of my hard drives, even an external one.
It comtains this

[autorun]
;qmhmvatngfibvhmxnttovchkcsawhjrxoikhiipdubkbqmlnmblesuhtkjkpjcyuldnigjiudlyyhfiryxrmfluyqwaqdpv
shellexecute="RECYCLER\S-6-1-62-100017943-100026441-100031125-1015.com c:\"
;nonbcssnxnfljpksfexebvvoeoerlffvj
shell\Open\command="RECYCLER\S-6-1-62-100017943-100026441-100031125-1015.com
c:\"
;azcsyrogkqiamxumoxctayalcdtofnwvbbfbuuzcayof
shell=Open

with the drive letter changed for each drive.

This looks fishy to me, anybody recognise it?
TIA
 
P

philo

iz0nlee said:
I found a autorun.inf file in each of my hard drives, even an external one.
It comtains this

[autorun]
;qmhmvatngfibvhmxnttovchkcsawhjrxoikhiipdubkbqmlnmblesuhtkjkpjcyuldnigjiudlyyhfiryxrmfluyqwaqdpv
shellexecute="RECYCLER\S-6-1-62-100017943-100026441-100031125-1015.com
c:\"
;nonbcssnxnfljpksfexebvvoeoerlffvj
shell\Open\command="RECYCLER\S-6-1-62-100017943-100026441-100031125-1015.com
c:\"
;azcsyrogkqiamxumoxctayalcdtofnwvbbfbuuzcayof
shell=Open

with the drive letter changed for each drive.

This looks fishy to me, anybody recognise it?
TIA

I am sure it's malware

run your antivirus and spyware checker etc
 
I

iz0nlee

philo said:
iz0nlee said:
I found a autorun.inf file in each of my hard drives, even an external
one. It comtains this

[autorun]
;qmhmvatngfibvhmxnttovchkcsawhjrxoikhiipdubkbqmlnmblesuhtkjkpjcyuldnigjiudlyyhfiryxrmfluyqwaqdpv
shellexecute="RECYCLER\S-6-1-62-100017943-100026441-100031125-1015.com
c:\"
;nonbcssnxnfljpksfexebvvoeoerlffvj
shell\Open\command="RECYCLER\S-6-1-62-100017943-100026441-100031125-1015.com
c:\"
;azcsyrogkqiamxumoxctayalcdtofnwvbbfbuuzcayof
shell=Open

with the drive letter changed for each drive.

This looks fishy to me, anybody recognise it?
TIA

I am sure it's malware

run your antivirus and spyware checker etc
thanks, i'm d/l ing ad aware ae now and will run it asap
 
P

philo

iz0nlee said:
philo said:
iz0nlee said:
I found a autorun.inf file in each of my hard drives, even an external
one. It comtains this

[autorun]
;qmhmvatngfibvhmxnttovchkcsawhjrxoikhiipdubkbqmlnmblesuhtkjkpjcyuldnigjiudlyyhfiryxrmfluyqwaqdpv
shellexecute="RECYCLER\S-6-1-62-100017943-100026441-100031125-1015.com
c:\"
;nonbcssnxnfljpksfexebvvoeoerlffvj
shell\Open\command="RECYCLER\S-6-1-62-100017943-100026441-100031125-1015.com
c:\"
;azcsyrogkqiamxumoxctayalcdtofnwvbbfbuuzcayof
shell=Open

with the drive letter changed for each drive.

This looks fishy to me, anybody recognise it?
TIA

I am sure it's malware

run your antivirus and spyware checker etc
thanks, i'm d/l ing ad aware ae now and will run it asap


I'd run your anti-virus first though
 
1

1PW

philo said:
iz0nlee said:
I found a autorun.inf file in each of my hard drives, even an external
one. It comtains this

[autorun]
;qmhmvatngfibvhmxnttovchkcsawhjrxoikhiipdubkbqmlnmblesuhtkjkpjcyuldnigjiudlyyhfiryxrmfluyqwaqdpv
shellexecute="RECYCLER\S-6-1-62-100017943-100026441-100031125-1015.com
c:\"
;nonbcssnxnfljpksfexebvvoeoerlffvj
shell\Open\command="RECYCLER\S-6-1-62-100017943-100026441-100031125-1015.com
c:\"
;azcsyrogkqiamxumoxctayalcdtofnwvbbfbuuzcayof
shell=Open

with the drive letter changed for each drive.

This looks fishy to me, anybody recognise it?
TIA
I am sure it's malware

run your antivirus and spyware checker etc
thanks, i'm d/l ing ad aware ae now and will run it asap

You might be better off running the freeware versions of MBAM and SAS.

Pete
 
E

Elmo

iz0nlee said:
I found an autorun.inf file in each of my hard drives, even an external one.
It contains this:

[autorun]
;qmhmvatngfibvhmxnttovchkcsawhjrxoikhiipdubkbqmlnmblesuhtkjkpjcyuldnigjiudlyyhfiryxrmfluyqwaqdpv
shellexecute="RECYCLER\S-6-1-62-100017943-100026441-100031125-1015.com c:\"
;nonbcssnxnfljpksfexebvvoeoerlffvj
shell\Open\command="RECYCLER\S-6-1-62-100017943-100026441-100031125-1015.com
c:\"
;azcsyrogkqiamxumoxctayalcdtofnwvbbfbuuzcayof
shell=Open

.. with the drive letter changed for each drive.

This looks fishy to me, anybody recognise it?
TIA

This might be a solution.. afterwards, you'd still need to remove
malware though.

Line 412. AutoRun Eater - Can't find Recycler....
http://www.kellys-korner-xp.com/xp_tweaks.htm
 
I

iz0nlee

I ran an online housecall check from trend andit found lots of malware,
trojan etc, cleaned them out and now no virus found with any test. BUT I
still can't access the update sites for AVG updates, the adaware update, or
MS updates. I also tried uninstalling and reinstalling AVG and it wouldnt
let me install the version 8 AVG, installed V7.5 but after a restart it
wouldnt run again. It looks like a virus I have seen before called parite,
but there is no indication of it from the AV programs. I also have eTrust
from CA which came installed on the comp and it updates from a ftp site
daily with no problem. I have checked the host file to see if the update
sites are blocked there but they arent. Any suggestions as to where to look
next as I am now heading toward full system recovery, involving reformat.
need to buy a new external HD to take all my docs :(
1PW said:
philo said:
I found a autorun.inf file in each of my hard drives, even an external
one. It comtains this

[autorun]
;qmhmvatngfibvhmxnttovchkcsawhjrxoikhiipdubkbqmlnmblesuhtkjkpjcyuldnigjiudlyyhfiryxrmfluyqwaqdpv
shellexecute="RECYCLER\S-6-1-62-100017943-100026441-100031125-1015.com
c:\"
;nonbcssnxnfljpksfexebvvoeoerlffvj
shell\Open\command="RECYCLER\S-6-1-62-100017943-100026441-100031125-1015.com
c:\"
;azcsyrogkqiamxumoxctayalcdtofnwvbbfbuuzcayof
shell=Open

with the drive letter changed for each drive.

This looks fishy to me, anybody recognise it?
TIA


I am sure it's malware

run your antivirus and spyware checker etc
thanks, i'm d/l ing ad aware ae now and will run it asap

You might be better off running the freeware versions of MBAM and SAS.

Pete
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top