Help with possible malware that turns usb Shortcut.

[leandogo]

Hello! Since the day before yesterday, I inserted a USB stick and found this shortcut I thought I had misconfigured so I double-click on it and from there began the nightmare ...


http://i47.tinypic.com/33z5qwy.jpg

When I insert the USB into my PC, in memory automatically appears a shortcut of it, hiding all my files. I intetado show hidden files and delete the "virus" or "malware" but not destroyed as it returns all the same when I insert the memory stick.

Searching the internet I found ways CMD, to replace or display files and displays the following to the shortcut and shown to be the file "rundll32.exe"


http://i47.tinypic.com/2ceoyhj.jpghttp://i47.tinypic.com/amj9.jpghttp://i50.tinypic.com/zx90rs.jpghttp://i47.tinypic.com/3143xqw.jpg

C:\Windows\system32\rundll32.exe _WKVVTEHE.init,krnl jqyrzgnhovdxelsmtbicjqyrzgnhov xelfmtbucjqkrzgahovpxs

I considered replacing by CMD, the rundll32.exe file on the other, but when I put my USB aparenteme clean after formatting was repeated and frankly I do not know to do.I need your help because it is bug bothers me! :sad:

P.D:Excuse my English, but I speak Spanish.

[Dakeyras]

Hi and welcome to Safer Networking. :)

My apologies for the delay and if you still require assistance carry out the below for myself please...

It looks to me you may have either Vista or Windows 7 as a Operating System so:-

Download/Run Panda USB Vaccine:

Please download Panda USB Vaccine from here (http://www.majorgeeks.com/Panda_USB_and_AutoRun_Vaccine_d6029.html) to the Desktop of your machine.


Right-click on USBVaccineSetup.exe and select Run as Administrator >> follow the prompts in the installation wizard.
At the configuration screen(settings)...
Ensure both Run Panda USB Vaccine automatically when computer boots (/resident mode) & Automatically vaccinate any newly inserted USB key are selected >> plus NTFS support
Now click on Next> >> ensure Launch Panda USB Vaccine is selected >> click on Finish.
Insert your USB Drive in your machine...it will be automatically vaccinated(as will any usb drives connected in the future).

Note: You may uninstall Panda USB Vaccine when we have completed the Malware Removal process if you so wish. Though my advice would be to keep it installed.

Scan with SCC:

Please download Shortcut Cleaner (http://www.bleepingcomputer.com/download/shortcut-cleaner/) to your Desktop.

Right-click on sc-cleaner.exe and select Run as Administrator >> follow the prompts and post the contents of sc-cleaner.txt in your next reply.

Note: The log can also be located at C: >> sc-cleaner.txt

Next

When completed the above, please post back the following in the order asked for:


How is your computer performing now, any further symptoms and or problems encountered?
Shortcut Cleaner Log.

[Dakeyras]

Due to the lack of feedback this Topic is closed.

If it has been three days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh set of DDS logs and a link to your previous thread.