« previous next »
Pages: [1]   Go Down

Author Topic: autorun.inf virus'  (Read 8262 times)

0 Members and 1 Guest are viewing this topic.

Offline Gerard

  • Moderator
  • Board Veteran
  • *****
  • Posts: 3006
  • Gender: Male
autorun.inf virus'
« on: November 15, 2011, 02:26:48 PM »
im having a lot of virus recently flagging up on our legacy network - every day around 20-30  and every time its showing e:\autorun.inf is infected by Troj/agent-mph
i have sohos enterprise which is picking up the virus as it infects the pen drives but doesnt seem to be picking it up on any machines which im assuming there are some giving the number of pen drives getting infected.
whats the chances they could all be getting brought in from students computers?
how would you go about getting to the bottom of it? 
i have logged a call with c2k to see if they are having any problems with certain machines which may be causing it all and thinking of using a standalone a/v and scanning every machine but it would take a while
Logged

Offline Stephen

  • Board Veteran
  • *****
  • Posts: 5996
  • Gender: Male
    • Banbridge Academy Online
  • Speciality: Black Neck sixth Dan - No Kan Do
Re: autorun.inf virus'
« Reply #1 on: November 15, 2011, 04:39:21 PM »
try http://www.softpedia.com/get/Security/Secure-cleaning/Autorun-Eater.shtml
 
Sits on the machine and checks every usb drive you attach for an autorun and if it finds a nasty one it will let you remove it.
Logged
One looks back with appreciation to the brilliant teachers, but with gratitude to those who touched our human feelings. The curriculum is so much necessary raw material, but warmth is the vital element for the growing plant and for the soul of the child.
Carl Jung

Offline Marc

  • Full Member
  • ***
  • Posts: 101
  • Gender: Male
  • Speciality: IT Technician
Re: autorun.inf virus'
« Reply #2 on: November 16, 2011, 10:20:22 AM »
We're having the same problem on our actual C2K network at the moment, server has been checked and viruses removed but we're still getting virus messages so trying to work my way through the machines in school to get rid of it all being well...
Logged

Offline Aaron

  • Technicians
  • Board Veteran
  • *****
  • Posts: 1369
  • Gender: Male
    • Willis & Co
Re: autorun.inf virus'
« Reply #3 on: November 16, 2011, 11:23:58 AM »
its carried around on the pupils memory sticks i have cleaned them from our legacy network but i think its also infected the c2k computers because when the pupil plugs it into the c2k computer and then into legacy again its flagged up its a real pain to make sure its removed from every machine to be honest it is on both legacy and c2k machines everytime i remove it, it ends up back on again later that day
Logged

Offline Marc

  • Full Member
  • ***
  • Posts: 101
  • Gender: Male
  • Speciality: IT Technician
Re: autorun.inf virus'
« Reply #4 on: November 16, 2011, 12:02:21 PM »
That's what I've started doing - slowly getting there...  :-\
Logged
Pages: [1]   Go Up
« previous next »