Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Autorun.inf | Ctfmon.exe


  • Please log in to reply
2 replies to this topic

#1 Raj77

Raj77

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:18 PM

Posted 28 May 2007 - 06:45 PM

Hello friends,

My PC was infected with some virus.. i dont know which is that..
what it does is
creates autorun.inf in each DRIVE ( including any flash drive )
where it opens

recycled\ctfmon.exe
OR
Recycled\<some name>.vbs

and these files are hidden files.

To remove this...

i tried in regedit.

in regedit
goto HCU\software\microsoft\windows\Currentversion\Explorer\Mountpoints2

here under each KEY check for OPEN (O) and delete entire key containing "OPEN (O) "

Thats all..

please let me know any more things any body explored in it.

BC AdBot (Login to Remove)

 


#2 fozzie

fozzie

    aut viam inveniam aut faciam


  • Members
  • 3,516 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ossendrecht/The Netherlands
  • Local time:05:18 AM

Posted 29 May 2007 - 02:26 AM

Please download Flash_Disinfector.exe http://www.techsupportforum.com/sectools/s...Disinfector.exe.
Place it on your desktop. Reboot in safe mode put the Flashdrive in the computer and let this tool run.

After it has run, reboot in normal mode and run two online scans :
Please run a BitDefender Online Scan
  • Click I Agree to agree to the EULA.
  • Allow the ActiveX control to install when prompted.
  • Click Click here to scan to begin the scan.
  • Please refrain from using the computer until the scan is finished. This might take a while to run, but it is important that nothing else is running while you scan.
  • When the scan is finished, click on Click here to export the scan results.
  • Save the report to your desktop so you can post it in your next reply.
Please run the F-Secure Online Scanner
Note: This Scanner is for Internet Explorer Only!
Follow the Instruction here for installation.
Accept the License Agreement.
Once the ActiveX installs,Click Full System Scan
Once the download completes, the scan will begin automatically.
The scan will take some time to finish, so please be patient.
When the scan completes, click the Automatic cleaning (recommended) button.
Click the Show Report button and Copy&Paste the entire report in your next reply.

#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,769 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:18 AM

Posted 29 May 2007 - 10:10 AM

Keeping Autorun enabled on USB and other removable drives has become a security risk due to the increasing number of malware variants that can infect them and transfer the infection to your computer via an autorun.inf file that you do no expect or intend to run. When removable media is inserted, autorun looks for autorun.inf which automatically can run a malicious .exe or .bat file. Read Danger USB! Worm targets removable memory sticks.

I recommend disabling the Autorun feature on USB drives as a method of prevention.

The easiest way to disable Autorun on a specific drive is to download and use Tweak UI PowerToy.
  • After installation, launch Tweak UI, double-click on My Computer in the tree menu on the left, then click on AutoPlay > Drives. This will allow you to change the system settings for AutoPlay/autorun.
  • Uncheck the drives you want to disable AutoPlay on and click on Apply.
  • Next, click on the Types in the left tree. This allows you to control whether Autoplay is enabled for CD and DVD drives and removable drives. You may need to restart Tweak UI if it closes after step 2.
  • Uncheck the box to disable Autoplay for a particular type of drive.
  • Click Apply.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users