Help - Search - Members - Calendar
Full Version: Annoying Worm
MSFN Forums > Software, Hardware, Media and Games Central > Malware Prevention and Security

   
Google Internet Forums Unattended CD/DVD Guide
D_block
AdobeR.exe

msvcr71.dll

autorun.inf

i just found these 3 files on a usb flash, eset quarintines the autorun.inf automatically, the other 2 is hidden files . when i manually delete them an reformat the flash it keeps comin back as i insert the flash ?

- <COLUMN NAME="Time">
<DATE>6/5/2008</DATE>
<TIME>11:16:34 AM</TIME>
</COLUMN>
<COLUMN NAME="Scanner">Real-time file system protection</COLUMN>
<COLUMN NAME="Object">file</COLUMN>
<COLUMN NAME="Name">F:\AUTORUN.INF</COLUMN>
<COLUMN NAME="Threat">Win32/RJump.A worm</COLUMN>
<COLUMN NAME="Action">cleaned by deleting - quarantined</COLUMN>
<COLUMN NAME="User">NT AUTHORITY\SYSTEM</COLUMN>
<COLUMN NAME="Information">Event occurred on a new file created by the application: F:\AdobeR.exe.</COLUMN>
</RECORD>



this is a copy of an file from in the quarintine section in eset..

what do you think is causing the file to come back .. an everytime it comes back it recreates the autorun an eset removes immediately

How can i stop this ... my eset is up to date (3161)
mara-
It is coming back because your computer is infected. Run full antivirus scan of you computer. Also, install Spybot-S&D! and scan you computer, install SuperAntiSpyware Free Edition and run a scan.

Cheers newwink.gif
Shelax
u need tformat flash drive and create a folder "autorun.inf", after creating a folder ur flash drive does not create autorun.inf file
narayanaswamy
more details of adobeR.exe

http://www.trendmicro.com/vinfo/virusencyc...me=WORM_RJUMP.D


to remove it pls go to any of these links...

http://www.trendmicro.com/vinfo/virusencyc....D&VSect=Sn
http://www.greatis.com/appdata/d/a/adober.exe.htm

i think kaspersky automatically detects and removes this one...
Google Internet Forums Unattended CD/DVD Guide
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.