killVBS.vbs-help is needed

[cosmo]

Hi,

My father bought in Thailand a new Creative mp3 player. When I attached it with the usb to my laptop to recharge it my avg av found a trojan killVBS.vbs.

When I tried to look what files in the mp3 player I found an "Autorun.inf" file with this script "[autorun] shellexecute=wscript.exe killVBS.vbs". should I delete this file?

I found another 2 folders:1) "ms.config" which is empty 2) "$lddata$" with some files which have .ldf extention. are those part of the mp3 or I should delete them?

after that I was looking in here and found the 15-step solution to get rid of malware and Co. I was going through all the steps except the 3rd tool and the online scan of trend micro.

I attached what you guys ask to. is everything o.k? was it enough that the av found the trojan? please let me know if can use my laptop with no worries.

thanks,
leo

oh, and I forgot to tell that the rootkit found nothing.

 

[raybay]

Is it running ok now? Is the About:blank startup screen intentional?

 

[cosmo]

killVBS.vbs

Is it running ok now? Is the About:blank startup screen intentional?

Thanks for responding.

My laptop is running and all is good. i just wanna know whether there is a Trojan in my laptop according to the file i attached and i should do something or there isn't.
Another thing is should i delete the autorun file? can it run again on another PC?

thanks.

 

[raybay]

I don't see evidence of it, but I am not the real expert on Malware on this forum.
It looks clean. I would run free scans from www.panda.com, www.mcafee.com, EZTrust EZArmor at www.ca.com. They won't remove it, but they will detect it if there, and these free versions are good for finding killVBS.vbs and residuals.
Then you can rest easy. Just don't go where you went to get it.