HELP!!! run.exe & autorun.ini.

bigmac121 · 8 Jun 2009 at 13:57

Strange thing happen last night will I was having dinner! I uninstalled Vmware and was checking to see if it left the image of XP (Sorry @ work!!)
I saw these two hidden files run.exe & autorun.ini. I deleted then and they came back after a few secs. I checked all6 drives and found them on each.

I am using avast & windows defender. Run scans and deleted. Rebooted and they came back!!!

I cannot not see anything concrete on "Google" of how to removed these.

Can anyone advise?

fallbayuk · 8 Jun 2009 at 14:10

You have a virus. Autoruns is a free utility that should point to all the locations that its using to start itself up from, which you can then remove. You'll still need to do a full virus/malware scan afterwards though and from experience the type of virus you've got can be pretty tricky to remove.

bigmac121 · 8 Jun 2009 at 14:15

Thanks Fall. I have vista manager and checked for startup progs, but couldn't see it!!

bledd · 8 Jun 2009 at 16:39

remove Avast

disable system restore
install Nod32 trial

update the AV , then do a full system scan

also try this after

http://www.malwarebytes.org/mbam-download.php

neil_g · 8 Jun 2009 at 16:45

keep avast

install spyware software such as spybot and do a full scan

Ratbag · 8 Jun 2009 at 17:44

I had something similar a while back, it was an autorun virus that came on an apparently brand new MP4 player I got from.....Aldi.

It wasn't picked up by any antimalware app I tried, or NOD. In the end, I think it was some safe mode related frippery that did the trick - I managed to delete the files. The only issue I had then was that the virus changed something so I couldn't see hidden files under normal circumstances. I ended up restoring an image.

bigmac121 · 8 Jun 2009 at 19:49

Thanks Guys..went to http://www.malwarebytes.org/mbam.php Sorted now.