Malware Removal Forums

trojan on a memory stick... now on laptop :(

foxglove · 2011-01-16T00:29:48+00:00

Hi, computer gurus- I hope my computer falls in the category of those you will help with. I'm teaching on contract and using my own memory stick for powerpoint presentations in class, and seem to have brought a nasty home with me. The university IT department will have to deal with cleaning the work computer (or whichever classroom computer is infected, I suppose all of them by now), but I'm on my own with my personal computer, which got infected because of using my own memory stick at the uni. Symptoms (assuming you can help me): 1) Using Firefox, at random intervals clicking a link will open a new tab. Was something called Joking Spirit for a few days, now it's Industrial something-or-other. Annoying, but at least they go away when closed. 2) Plugging in memory stick gave a "Device not ready" message; after clicking okay, a McAfee window popped up and reported two trojans deleted. Names were "imperator.exe" and "jvxqnu.exe"; the latter seems associated with Spybot Search and Destroy

87 min read

foxglove

January 22, 2011, 5:49 PM UTC

[autorun]
icon = .\mxoicon3.ico

That's all... there is an icon called "mxoicon3" as well. Both claim they were last modified in Feb 2006, if that helps at all.

I just realised it's not showing an extension, I must've hallucinated the .inf extension. Most of my files don't have extensions, and I have a vague memory of some setting to hide common file types, so I won't worry about it!

foxglove

Bob4

January 23, 2011, 10:45 AM UTC

That ini is certainly for your maxtor External.

I just realised it's not showing an extension

If you care to see extensions for all files and folders.

Click Start My Computer (windows explorer)
Select Tools / Folder Options. Select the View Tab
Uncheck the "Hide file extensions for known file types"

Your good to go. :mrgreen:

foxglove

January 23, 2011, 12:23 PM UTC

That ini is certainly for your maxtor External.

And I guess it being there blocked the trojan, like the one that Flash Disinfector put on my memory stick. Cool.

Your good to go.

Yay!!!

I'll go do all those final clean-up things, and enjoy a clean computer... and be extra-picky about keeping it that way! Thanks so much, you've been a great help and very patient. So glad I stumbled on this place!

foxglove

Wingman

January 24, 2011, 2:29 PM UTC

As your problems appear to have been resolved, this topic is now closed.
We are pleased we could help you resolve your computer's malware issues.

If you are satisfied with our assistance and wish to donate to help with the costs of this volunteer site, please read :
Donations For Malware Removal