I'm new, therefore forgive my mistakes if any
My laptop at work was taken by a collegue of mine and returned with a virus/trojan that does:
- Fixes or generates a new autorun.inf in any USB-stick that is inserted to the PC.
- The autorun.inf has the following text:
[AutoRun]shellexecute=/RECYCLER/rrqzrmne.exe navg- The filename inside the RECYCLER directory changes everytime the file is generated.
For my good luck, the McAfee antivirus detects and destroys the executable. (Its size is always 114688 bytes)
For my bad luck, I can't find the one that is generating this trojan file. (The McAfee does not catch it, nor other tools I have run)
Attached is the HJT log file I have captured: hijackthis.log 13.95KB 25 downloads
Thanks in advance, and have a nice day