autorun.inf infection

View previous topic View next topic Go down

Same issue

Post by rivanisz on Sun 05 Jul 2009, 8:45 am

I have the same issue, but I can't get rid of it.

1) At search engines, if I click a link from the search results, a browser hijack sends me to some other crap page. If I go back to the results and click the link a second time, it goes through properly.

2) It originally had an autorun.inf on all my hard drives and ran ctfmon without my permission and was clearly disguising itself as ctfmon because ctfmon only runs after running a Microsoft Office product, which I don't own.

3) As usual with RECYCLER, I cannot remove it without returning itself. And it is malicious, I don't feel like describing it all in detail, but this is not just my Recycle bin. It has a file named "S-1-5-21-275612506-2139200233-1739133022-1005" in the RECYCLER folder, and another hidden folder in addition to the original poster's folders named RRbackups

What I have done:
1) I installed hijackthis, couldn't even get it to run. I double click the installed exe and nothing happens. I've tried reinstalls and nothing helps.

2) I ran TrendMicro antivirus which has only failed me this one time, and it found nothing, even in safe mode.

3) I ran just about every free anti-virus and anti-spyware software out there, and got nothing, including malware bytes, ad-aware, and superanitspyware. All of them came up empty.

4) I ran the USB flash drive cleaner, and all that did was create the autorun.inf folder which I now on my hard drive and usb external harddrive for all of eternity, but has not stopped RECYCLER from coming back.

The only two things that has stopped me from formatting and starting fresh are this:
1) It is on my external hard drive which is my only Backup option, so as soon as I restore the backup, im right back where I started.

2) I've read reports of this bastard persisting through formats, which I know can be possible, just rare.

PLEASE HELP, I'm really sick of this annoying piece of software, and I just want it to go away.



Posts : 1
Joined : 2009-07-05
Operating System : Windows XP Pro

View user profile

Back to top Go down

Re: autorun.inf infection

Post by Belahzur on Sun 05 Jul 2009, 9:08 am

Rename Hijack This to fixthis.exe and see if it will run.

Split your post out here.

@RealBelahzur - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Manager | Tech Officer
Manager | Tech Officer

Posts : 34917
Joined : 2008-08-04
Operating System : XP SP3 Media Centre

View user profile

Back to top Go down

View previous topic View next topic Back to top

Permissions in this forum:
You cannot reply to topics in this forum