asp.net / autorun.inf trojan

Viruses, hackers and crackers
Post Reply
neon_chameleon
Moderator Emeritus
Posts: 6098
Joined: 27 Feb 2004, 02:00
Location: Durban
Contact:

asp.net / autorun.inf trojan

Post by neon_chameleon »

Hey guys,

Does anybody know how to get rid of the trojan that loads a autorun.inf and an asp.net file on any mounted drive. I'm able to remove it manually but basically no AV or spyware remover will get rid of it so thus it just reloads itself.
Qualifications: BSc Computer Science & Information Technology, BCom Information Systems Honours, ISACA CISA, ISACA CRISC
Experience: Web Design, IT Auditing, IT Governance, Computer Retail, IT Consulting
Interests: Technology, Nutrition, Toasters, BBM, Facebook, Colourful Diagrams
SykomantiS
Registered User
Posts: 14085
Joined: 06 Oct 2004, 02:00
Location: Location, Location...
Contact:

Re: asp.net / autorun.inf trojan

Post by SykomantiS »

Which trojan is it? Even if your av can't remove it, you should be able to pick it up...
User avatar
Synthesis
Registered User
Posts: 14517
Joined: 25 May 2006, 02:00
Location: Location, Location
Contact:

Re: asp.net / autorun.inf trojan

Post by Synthesis »

Try the same removal process for the conficker worm which does pretty much the same thing:

Download the removal tool to see if you do have it: http://www.microsoft.com/downloads/deta ... laylang=en

Then patch your Computer so it doesn't happen every time you plug in a USB device: http://www.microsoft.com/technet/securi ... 8-067.mspx
Image
KALSTER
Forum Moderator
Posts: 5439
Joined: 12 Oct 2008, 02:08

Re: asp.net / autorun.inf trojan

Post by KALSTER »

"It is the mark of an educated mind to be able to entertain a thought without accepting it." - Aristotle
Intel i5 2500; AsRock Z77 Extreme 4; Asus GTX580; 4x 2GB DDR3 1333; Intel 520 240GB SSD + 2x WD 3TB + 2TB Samsung; Samsung 22X DVD/RW; 23" LG W2343T-PF; Huntkey 700W
Jonboy
Registered User
Posts: 1606
Joined: 20 Apr 2005, 02:00
Location: The Powerhouse!

Re: asp.net / autorun.inf trojan

Post by Jonboy »

Necro anyone?
[Intel Core i3 2100 {Sandybridge}]
[Asus P8P67 Pro LE Socket 155 Mobo]
[HIS AMD Radeon 6850 1GB Gfx]
[4Gb Mushkin Silverline DDR3 1333 RAM]
[500Gb Seagate SATAII 6G HDD]
[Coolermaster Elite 430 Chasis]
[Windows 7 Home Premium 64 Bit]
[LG W2234S 22" Display]
KALSTER
Forum Moderator
Posts: 5439
Joined: 12 Oct 2008, 02:08

Re: asp.net / autorun.inf trojan

Post by KALSTER »

Jonboy wrote:Necro anyone?
Damn, didn't even notice. :)
"It is the mark of an educated mind to be able to entertain a thought without accepting it." - Aristotle
Intel i5 2500; AsRock Z77 Extreme 4; Asus GTX580; 4x 2GB DDR3 1333; Intel 520 240GB SSD + 2x WD 3TB + 2TB Samsung; Samsung 22X DVD/RW; 23" LG W2343T-PF; Huntkey 700W
Post Reply