autorun.inf (extreme case)

[eBright]

Okay so, in my school (im a 7th grader student) we've been having alot of malware problems. So, there is an virus that almost the whole school has which is named autorun.inf virus. So, i am currently the only tech savy person within the 7th grade. all of the other students doesnt know bits about malware.

Heres a short story, my friend had a flash disk infected with the same virus. So he wanted to throw the flash disk from the 4th floor. so i said i could remove it easily. and he refused and threw it. so the problem is, the last generation of 7th graders (now 8th graders) had someone infected with the virus on 1 flash disk. What this virus would do is it would : Get installed from some malicious programs on the internet, then it would copy to all of the drives and flash disks plugged (by copy i mean delete all the files on the flashdisk and copy the virus).

So, someone got the virus on his flash disk. and, my school has a connected network of computer in the computer labotarium for us to practice to write word documents and other stuff (its pretty easy.) so when the person plugged in the drive, the whole computer (40ish) was infected. Every computer lesson, we bring flash drives to backup our files cause 1 computer is used by different people at different times.

My teachers are not tech savy at all too. Even my computer teacher doesnt know anything about hardware, malware and stuff. He only knows how to code html, and other languages. So there is a place where we buy laptops here. It is basically like a place where we buy laptops, and it will get fitted with bloatware and other stuff. So, one of the bloatware is basically a troll version of Smadav antivirus thing. It would say it if there was a virus, but it is kinda not working so when it is being put in quarantine, basically what it is doing is basically doing nothing to the files at all.

So guess what, the whole last generation of 7th graders got infected. What even worse is when they plugged in the virus to their laptops at home, their laptops got infected. Now, the 6 graders (me) turned into 7th graders. Our first computer lesson, we plugged in our flash disks. Guess what, we got infected too. The whole 7th grade (the laptops, the school pc's, all of the flashdisks) all got infected. Except me cause i am apparently the only one using antivirus programs. So my problem is when I plug in my flash disk to my friends laptop, it is deleted and replaced with the virus. And when they plug in to mine, my laptop gets the virus which i could remove easily. This ruined alot of presentations and stuff. My teacher had already tried to counter this by deleting the viruses on the school computers.

The bad thing about the teacher is, when we dont bring to flash disks to school at computer lessons, the teacher will be angry. For tech savy students like me, its basically saying "that if you dont want get malware on your computer, flashdisks and spread it even more, we will be mad at you"

Oh yea, i forgot to mention that the 7th, 8th and 9th graders share the same computers. so if we successfully cleaned up the whole 7th graders then if an infected 8th grader plugs in his flash disk, were doomed again.

but guess what, tommorrow, someone plugged one flashdisk with a virus into school network computer, then it spread to the whole class and then spread to everyones flashdisks then spread to everyones laptops. and my teacher had already cleaned up the school pc once but when someone plugged in their usb, the whole network was infected again. I feel bad for my friends that are probably being keylogged right now. Is there any solution to clean up the whole school?

Edited September 12, 2017 by eBright

[AdvancedSetup]

Hello @eBright

Unfortunately if there are multiple systems involved as well as multiple external media disks then isolation and clean up would be needed. Then you'd need some type of security software on the shared computer that is aware of and capable of stopping this threat if someone were to plug in a USB stick that has an infection on it.

We can try to help you, but if it's spread to other computers it can be a difficult cleanup job.

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

• If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
• If you don't have Malwarebytes 3 installed yet please download it from here and install it.
• Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
• Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
• If Malwarebytes won't run then please skip to the next step and let me know on your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

• Right-click on the program and select Run as Administrator to start the tool.
• Accept the Terms of use.
• Wait until the database is updated.
• Click Scan.
• When finished, please click Clean.
• Your PC should reboot now if any items were found.
• After reboot, a log file will be opened. Copy its content into your next reply.

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens, click Yes to disclaimer.
• Press the Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
• Please attach the Additions.txt log to your reply as well.

 

Thanks

Ron