+ Post New Thread
Results 1 to 11 of 11
Windows Thread, Virus in Technical; Hi people looking for some expert knowledge here on a Monday morning lol, I have had a memory stick given ...
  1. #1

    Join Date
    Jun 2009
    Location
    Blackburn
    Posts
    101
    Thank Post
    7
    Thanked 2 Times in 2 Posts
    Rep Power
    11

    Virus

    Hi people looking for some expert knowledge here on a Monday morning lol,

    I have had a memory stick given to me to saying it does not open, so when I checked the memory stick it appears as a folder and does not let you open the memory stick the way to get into the memory stick is to right click and explore it will write to the stick not a problem. So I went into hidden files and deleted the exe file but then I noticed another hidden folder called recycler. When I have deleted both files they seem to appear again very quickly and now 2 other members of staff have come to me with the same problem PLEASE HELP

  2. #2

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,941
    Thank Post
    519
    Thanked 2,500 Times in 1,941 Posts
    Blog Entries
    24
    Rep Power
    840
    Recycler is the recycle bin temporary file for the drive. The way to empty it is to empty the recycle bin.

  3. #3

    Join Date
    Jun 2009
    Location
    Blackburn
    Posts
    101
    Thank Post
    7
    Thanked 2 Times in 2 Posts
    Rep Power
    11
    but the exe file keeps on appearing any way of getting rid

  4. #4
    TechSupp's Avatar
    Join Date
    Mar 2007
    Location
    South Yorkshire
    Posts
    1,916
    Thank Post
    315
    Thanked 122 Times in 103 Posts
    Rep Power
    42
    I had this the other week with staff sticks, deleted file you found (cant remember name) copy all files folder toa safe area, formatted stick, copied suff back. I know Sophos should have taken care of it but it was longer to do that than do the above method (and in the end Sophos did not seem to clear the problem anyway).

  5. #5
    itguy22's Avatar
    Join Date
    Oct 2009
    Location
    South Yorkshire
    Posts
    82
    Thank Post
    14
    Thanked 3 Times in 2 Posts
    Rep Power
    11
    Ok, We have had this problem and after a fair bit of investigating we have found out the problem, On your key you have the EXE the Recycler and and Autorun file, the autorun file is the one that is the biggist pain, this is becuase when the user trys to click on the memory key as normal the autorun file then runs the payload (exe) which infects the particular machine that the key is inserted in, this in turn infects every key that is put into the machine. We found that AVG a full scan on the PC and the Key cleans it up, although you will still have to delete the Autorun manually. run the scan on the computer first then on the key. To combat the problem from getting round the school we enabled removable device scan automaticly when a user plugs in the memory key so it removes it before it has chance to cause any trouble. Let me know if this works.

  6. 2 Thanks to itguy22:

    speckytecky (24th May 2010), TechSupp (24th May 2010)

  7. #6
    TechSupp's Avatar
    Join Date
    Mar 2007
    Location
    South Yorkshire
    Posts
    1,916
    Thank Post
    315
    Thanked 122 Times in 103 Posts
    Rep Power
    42
    Sure we have that checked but been a while since i delved into Sophos

  8. #7

    Join Date
    Jun 2009
    Location
    Blackburn
    Posts
    101
    Thank Post
    7
    Thanked 2 Times in 2 Posts
    Rep Power
    11
    cheer's it guy but we dont use AVG we tend to use McAffe, and this does not pick it up?
    Last edited by mhussain; 24th May 2010 at 09:57 AM.

  9. #8
    itguy22's Avatar
    Join Date
    Oct 2009
    Location
    South Yorkshire
    Posts
    82
    Thank Post
    14
    Thanked 3 Times in 2 Posts
    Rep Power
    11
    Overall if you run AVG a fully updated version off 9(free) then that will clear it up. needs to be run on both the machine and key, also ask staff to do it on there home machines and any individual laptops that are in school.

    It does no real damage it is just an annoyance. Possible a Backdoor Bot

  10. #9
    itguy22's Avatar
    Join Date
    Oct 2009
    Location
    South Yorkshire
    Posts
    82
    Thank Post
    14
    Thanked 3 Times in 2 Posts
    Rep Power
    11
    Quote Originally Posted by mhussain View Post
    cheer it guy but we dont use AVG we tend to use McAffe, and this does not pick it up?
    Sorry only just got your above post, we mainly use Symantec but we had to have a couple off test machines with AVG free on to clear up this problem. Seems it is a sneaky one.

  11. #10

    Join Date
    Jul 2009
    Posts
    573
    Thank Post
    46
    Thanked 106 Times in 91 Posts
    Rep Power
    68
    also don't forget that the free versions of security software are usually meant for personal home use, not for use in businesses/schools etc.

  12. #11
    itguy22's Avatar
    Join Date
    Oct 2009
    Location
    South Yorkshire
    Posts
    82
    Thank Post
    14
    Thanked 3 Times in 2 Posts
    Rep Power
    11
    Quote Originally Posted by computer_expert View Post
    also don't forget that the free versions of security software are usually meant for personal home use, not for use in businesses/schools etc.
    Very True, thats why we did it on test machines. It was not rolled out to the network.

SHARE:
+ Post New Thread

Similar Threads

  1. Virus Help
    By gibbo_ap in forum General Chat
    Replies: 3
    Last Post: 22nd May 2010, 11:55 AM
  2. Virus or No Virus?
    By gmiller in forum Mac
    Replies: 8
    Last Post: 24th September 2009, 08:29 AM
  3. Virus on Server
    By roughyed in forum Windows Server 2000/2003
    Replies: 9
    Last Post: 20th January 2009, 01:54 PM
  4. New Virus?
    By apeo in forum Windows
    Replies: 8
    Last Post: 10th October 2008, 01:12 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •