How to remove worm "win32\autorunit.i?

Question

It has been one week iam suffering from this problem.plz plz provide me the solution as fast as possible

Answer 1

Try scanning it with Avira Antivirus, and it is free.

www.free-av.com

Also, get a few anti-spyware programs, and scan them too. All free.

www.superantispyware.com

www.spywareterminator.com

www.adaware.com

www.malwarebytes.com

Answer 2

Try this method suggested by my contacts

--------------------------------------...

You can boot up your PC in safe mode command prompt

[press F8 during bootup]

unhide the autorun.inf

c:\attrib -r -s -h autorun.inf

rename it the autorun.inf to txt

c:\ren autorun.inf to autorun.txt

create a FOLDER call autorun.inf to prevent re-infection

c:\mkdir autorun.inf

find out the virus file name

c:\type autorun.txt

It may show something like this

[AutoRun]

open=virusname.exe

shellexecute=virusname.exe

shell\Auto\command=virusname.exe

unhide the virus

c:\attrib -r -s -h virusname.exe

remove the virus

c:\del virusname.exe

del the autorun.txt

c:\del autorun.txt

Keep the autorun.inf folder to prevent future infection.

If you have D drive. Do the same thing.

If you have USB thumb drive, do the same.

Answer 3

Worm process and its file is MIDEERASE.EXE (This file erases *.mid files from the computer from c: upto k : without prompting the user )

Open up your task manager and locate the process MIDEERASE.EXE, end this process, now

To remove it search your computer for this file

MIDEERASE.EXE and delete it.

It deletes files of *.mid file on the copmputer from C: to K: and only executes if your have Visual Basic 4 dll installed VB40032.DLL.

If it shows error in deleting, restart the computer in safe mode (by pressing F8 before the windows boot).

Then delete it from there.

To assure the worm never enters again, try updating your windows, make sure your number of TCP-IP half number of concurrent connection limit must not exceed 100, other wise worms spread very fast!

Answer 4

Hello,

Open the notepad and copy-paste these lines :

@echo off

title VBS/Autorun Remover

echo Removing VBS/Autorun...

attrib -s -h -r C:\autorun.inf

del C:\autorun.inf

attrib -s -h -r C:\loveauto.vbs

del C:\loveauto.vbs

attrib -s -h -r C:\Windows\avpo0.exe

tskill.exe avpo0

del C:\Windows\avpo0.exe

attrib -s -h -r C:\Windows\avpo0.dll

del C:\Windows\avpo0.dll

attrib -s -h -r C:\Windows\avpo1.dll

del C:\Windows\avpo1.dll

attrib -s -h -r C:\WINDOWS\AdobeR.exe

tskill.exe AdobeR

del C:\WINDOWS\AdobeR.exe

echo.

echo Done.

pause > nul

Save the file with the name : Fix.Bat

Run this file.

Please look at this Test of Anti-Virus (August 2008) :

http://www.sosvirus.13.fr/viewtopic.php?...

Bye