Hello. I've recently got my laptop infected with a virus that creates fake path .lnk shortcuts to every folder in all external storage devices. These shortcuts redirect me to system 32 in Windows. So, instead of having the normal folders, I get these shortcuts while the folders are completely hidden from view (not with the normal "hideen" option from windows) and I can not acces the files in the folders. Apparently, the computer is not affected in the same way (folders are fine) - so the computer is just carring the virus from one flash drive to another. The only thing that it does to my laptop, is not allowing me to acces any antivirus web sites via my default browser (Opera) and it incapacitates Internet Explorer browser (it doeas not load anything). My question is: if my McAfee Internet Security Suite (with most recent updates) can not find any viruses on my laptop or the external storage devices (I've run full scans on both), what would be the solution to this problem? Can the McAfee team find a antivirus solution for this?
PS. The folder that contains the virus on the external storage device is named "RECYCLER" and it contains the executable "BCB4008F41F9651395708C0677F3CBFF.exe". I can only find it on the memory stick, and nowhere on the laptop - it might be hidden under another name, behind multiple Windows folders.
This malware relies on the Autoplay feature to spread itself. Microsoft has closed this loophole with some recent updates, so try downloading from Windows Updates all updates, both critical high-priority and custom optional ones, for your system. Then run Microsoft's Malicious Software Removal Tool, which is fully compatible with McAfee.
If your default browser is Opera and IE is disabled, try accessing the internet with another browser - Chrome or Firefox. With Firefox there are some add-ons which give you extra security features.
Submit the file to Mcafee
Ensure all MS updates are up to date. Kb971029 is 1 you need though probably too late
Message was edited by: Peacekeeper on 29/03/11 6:58:04 AMMessage was edited by: Peacekeeper on 29/03/11 7:01:33 AM