Worm.Agent.H

[EricJ]

Hi,

I'm running MBAM Pro, as well as AVG free and seem to have this Worm.Agent.H recurring. I had the same thing yesterday, and rebooted, figuring it was taken care of. Not sure what to do next.

Eric

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Database version: 5005

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

11/3/2010 12:41:43 AM

mbam-log-2010-11-03 (00-41-43).txt

Scan type: Quick scan

Objects scanned: 156390

Time elapsed: 8 minute(s), 54 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

E:\AUTORUN.INF (Worm.Agent.H) -> Delete on reboot.

[LDTate]

I'll take it your E: drive is a external USB device.

Download this file

http://download.bleepingcomputer.com/sUBs/...Disinfector.exe

For all of your USB or external drives:

Open the drive.

Click the Tools menu, and then click Folder Options.

Click the View tab.

Uncheck "Hide file extensions for known file types."

Under the "Hidden files" folder, select "Show hidden files and folders."

Uncheck "Hide protected operating system files."

Click Apply, and then click OK.

Look in E: for the file autorun.inf and delete it if found.

Also look for a Folder that's named resycled, make sure of the spelling and delete the folder if found. DO NOT delete the Recycler folder.

Now run the Flash_Disinfector.exe.

Be sure to insert any flash drives or USB devices that you use.

Do this for every USB / external drives:

Once finshed:

Double-click My Computer.

Click the Tools menu, and then click Folder Options.

Click the View tab.

Check "Hide file extensions for known file types."

Under the "Hidden files" folder, Uncheck "Show hidden files and folders."

Check "Hide protected operating system files."

Click Apply, and then click OK.

Reboot and run a new MBAM scan

Also please describe how your computer behaves at the moment.

[EricJ]

LDTate, thank you for the response. My E drive is actually a CD drive. I may have found my error, I'll scan and find out, embarrassingly I had left a system tools/utilities type disc (OEM recovery stuff) in it and I'll see if that was where the issue was. Also, AVG seemed to hate the link and file you wanted me to DL.

Eric

[LDTate]

Also, AVG seemed to hate the link and file you wanted me to DL.

The anti-virus programs don't like our tools. Too bad they won't prevent infections from getting installed.

[LDTate]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!