Malware Removal Forums

trojan on a memory stick... now on laptop :(

foxglove · 2011-01-16T00:29:48+00:00

Hi, computer gurus- I hope my computer falls in the category of those you will help with. I'm teaching on contract and using my own memory stick for powerpoint presentations in class, and seem to have brought a nasty home with me. The university IT department will have to deal with cleaning the work computer (or whichever classroom computer is infected, I suppose all of them by now), but I'm on my own with my personal computer, which got infected because of using my own memory stick at the uni. Symptoms (assuming you can help me): 1) Using Firefox, at random intervals clicking a link will open a new tab. Was something called Joking Spirit for a few days, now it's Industrial something-or-other. Annoying, but at least they go away when closed. 2) Plugging in memory stick gave a "Device not ready" message; after clicking okay, a McAfee window popped up and reported two trojans deleted. Names were "imperator.exe" and "jvxqnu.exe"; the latter seems associated with Spybot Search and Destroy

12 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

foxglove

January 22, 2011, 5:49 PM UTC

[autorun]
icon = .\mxoicon3.ico

That's all... there is an icon called "mxoicon3" as well. Both claim they were last modified in Feb 2006, if that helps at all.

I just realised it's not showing an extension, I must've hallucinated the .inf extension. Most of my files don't have extensions, and I have a vague memory of some setting to hide common file types, so I won't worry about it!

foxglove

Bob4 MRU Master

January 23, 2011, 10:45 AM UTC

That ini is certainly for your maxtor External.

I just realised it's not showing an extension

If you care to see extensions for all files and folders.

Click Start My Computer (windows explorer)
Select Tools / Folder Options. Select the View Tab
Uncheck the "Hide file extensions for known file types"

Your good to go. :mrgreen:

foxglove

January 23, 2011, 12:23 PM UTC

That ini is certainly for your maxtor External.

And I guess it being there blocked the trojan, like the one that Flash Disinfector put on my memory stick. Cool.

Your good to go.

Yay!!!

I'll go do all those final clean-up things, and enjoy a clean computer... and be extra-picky about keeping it that way! Thanks so much, you've been a great help and very patient. So glad I stumbled on this place!

foxglove

Wingman Admin/Teacher

January 24, 2011, 2:29 PM UTC

As your problems appear to have been resolved, this topic is now closed.
We are pleased we could help you resolve your computer's malware issues.

If you are satisfied with our assistance and wish to donate to help with the costs of this volunteer site, please read :
Donations For Malware Removal

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.