VBS:Small in Autorun.vbs

CBCB Ƹ̵̡Ӝ̵̨̄ƷDer Millionendorf- Icrontian
edited May 2007 in Spyware & Virus Removal
My Avast scanner just popped up once for each of my partitions, letting me know that VBS:Small has been detected in the autorun.vbs in the root of each drive.

I clicked 'Move to Chest each time, but now I cannot browse any of my drives.

Exploring the drive contents seems to be the only thing effected. I get an error message about autorun.vbs being AWOL.

This is a fresh (yesterday) install of Windows XP SP2. It's still working on downloading all of it's updates.

any help?

Comments

  • Rahina-RescueRahina-Rescue Finland
    edited May 2007
    Hello CB Droege! Welcome to The forums :)

    Please Do the following:

    Please download Deckard's System Scanner (DSS) and save it to your Desktop.
    • Close all other windows before proceeding.
    • Double-click on dss.exe and follow the prompts.
    • When it has finished, DSS will open two Notepads: main.txt and extra.txt
    • Use Save As to save both Notepad files to your Desktop and post them in your next reply.
  • CBCB Ƹ̵̡Ӝ̵̨̄Ʒ Der Millionendorf- Icrontian
    edited May 2007
    Interesting...

    Is that just a form reply?

    I've been a member of these forums since they opened, and I'm pretty sure I already posted a description of exactly what's infecting my system.

    If It'll help I'll run this progy anyway. :P

    Back soon with those text files. ;)
  • Rahina-RescueRahina-Rescue Finland
    edited May 2007
    Errmm, That is a Professional Tool Which We use to Diagnose your system..

    Let me know when you are ready
  • CBCB Ƹ̵̡Ӝ̵̨̄Ʒ Der Millionendorf- Icrontian
    edited May 2007
    I'm only looking for a tool or fix to remove the specific problem mentioned in the OP. I don't need a full system diagnostic. I just installed this copy of windows yesterday.

    here's the text file anyway... It only made one.
  • Rahina-RescueRahina-Rescue Finland
    edited May 2007
    I don't need
    So you are not happy with the service i provide?

    Step #1

    Please Download Clean Autoruns

    Save the attached Clean autoruns.zip to your desktop and extract (unzip) its contents to the desktop. It contains a batch file, Clean autoruns.bat, Written by Mosaic1. Once extracted, open the folder and double click on the Clean autoruns.bat to run the fix.

    1. If any autoruns are found, the fix will move them to a backup folder.
    2. If any autoruns are found on the root of your drives, it will kill explorer so that the registry entries in the MountPoint(s) key are fixed.
    3. It will produce two files, Part1.txt and Part2.txt , that will show the state before and after the cleaning.
    4. Please post the contents of Part1.txt and Part2.txt along with a fresh Hjackthis log in your next reply.

    ** It is important that you follow these directions exactly as given.

    Step #2

    Please open HiJackThis and scan. Check the boxes next to all the entries listed below

    F2 - REG:system.ini: UserInit=userinit.exe,autorun.bat

    Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis

    Let me know how things are running now :)

    And no problem ;)
  • CBCB Ƹ̵̡Ӝ̵̨̄Ʒ Der Millionendorf- Icrontian
    edited May 2007
    Thank you for pointing me to 'Clean Autoruns'. That's what I was looking for :)
  • Rahina-RescueRahina-Rescue Finland
    edited May 2007
    So...?
  • CBCB Ƹ̵̡Ӝ̵̨̄Ʒ Der Millionendorf- Icrontian
    edited May 2007
    That was what I needed, thanks again. :)
  • Rahina-RescueRahina-Rescue Finland
    edited May 2007
    No problem, glad i could help.
Sign In or Register to comment.