Setup.exe, autorun.inf files keep appearing on shared folders

Status
Not open for further replies.
Ok

Since various solutions brought on by numerous sites don´t work i am asking for help directly.
I have 2 computers on network and both have the same problem that files Setup.exe and Autorun.inf keep appearing on shared folders only.
Next is the HJT log for both computers:


Please help...
 
Hello and welcome to Techspot.

Niether computer has any antivirus or firewall software installed.

Disconnect the pc`s from the network. Don`t reconnect until both are clean.

Download and install the free AVG antivirus programme and either the free Zonealarm or Kerio firewall programmes. You can get them HERE, HERE and HERE.

Install whichever firewall you chose, followed by AVG and reboot your system the required number of times. Run the AVG updates.

Do this for both computers.

You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.

Turn off system restore.(XP/ME only) See how here.> http://www.bleepingcomputer.com/forums/tutorial56.html

Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how here.> http://www.bleepingcomputer.com/forums/tutorial61.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how here.> http://www.bleepingcomputer.com/forums/tutorial62.html

Run a full system scan on both computers and delete whatever is found. This includes anything in the virus vault.

Reboot into normal mode, turn system restore back on and rehide your protected OS files.

Then, go HERE and follow the instructions exactly. Do this for each computer.

Post fresh HJT and Ewido logs(for each computer) as attachments into this thread, only after doing the above.

Regards Howard :wave: :wave:

This thread is for the use of xdomino only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
 
Status
Not open for further replies.
Back