Options
Re: Mal-Otorun
in reply to http://icrontic.com/forum/showthread.php?p=625193
It seems to be a hidden file in the RECYCLE folder in the usb stick. The name is "xou32.exe", is hidden and is a "backdoor.IRC.Bot" (quoute from symantec endpoint scan result).
After couple seconds it's transfered into \doc&sett\%current user%\local settings\temp\~dfabab.tmp.
If you know about the infected usb stick do this:
delete the recycler folder from the usb stick immediately after the insertion in the usb port.!!!disable all kind of "scanning at insertion type of autorun" programs before pluging in the mem.stick!!!
If you don't know about this virus infection clean your temp dir's and your recycler bin folders before the shoutdown.
It seems to be a hidden file in the RECYCLE folder in the usb stick. The name is "xou32.exe", is hidden and is a "backdoor.IRC.Bot" (quoute from symantec endpoint scan result).
After couple seconds it's transfered into \doc&sett\%current user%\local settings\temp\~dfabab.tmp.
If you know about the infected usb stick do this:
delete the recycler folder from the usb stick immediately after the insertion in the usb port.!!!disable all kind of "scanning at insertion type of autorun" programs before pluging in the mem.stick!!!
If you don't know about this virus infection clean your temp dir's and your recycler bin folders before the shoutdown.
0