How to remove this link virus?

Question

So theres this new virus that only a few people are talking about online for the past couple of months.

It doesnt turn files on my external hard drive into short cuts but moves everything into a separate folder and leaves a link for it within the hard drive window. 

I know im not explaining it well but the Hard drive icon that appears in My Computer appears again in the Hard drive and when you click that it opens your folders in a seperate window. 

I managed to find an antivirus of sorts, it called Macshield. Works to a certain point, it removes the link but it has to keep doing it since any flashdrive or external hard drive plugged in gets infected and Macshield has to act....the program doesnt solve the root cause just the immediate infection. 

Is there a better program that can scan and murder this virus from my OS???!!! Im Desperate!!!!

Sly_Old_Mole · Answer

Well lets look at the shortcut virus, this is a form of autorun.inf worm.

link virus ? new one on me, but my thinking is its a type of worm or something on your PC is writting to your external hard drive.

You say your AV does not find it, most AVs do not find autorun.inf worm.

Now bear in mind autorun.inf is not a virus

Will the external hard drive format ? if the answer is No, then I would say it's a autorun.inf worm.

autorun.inf worm stops external hard drive formatting due to the fact its running.

I would try the following:

1. run free Flash Disinfector by sUBs:
http://experi3nc3.wordpress.com/2007/05/10/flash-disinfector-by-subs/
(when the program tells you to put your USB in, you connect your external hard drive)
2. download & do a full scan with Dr WebCureIt:
http://www.freedrweb.com/cureit/?lng=en

Now edit your question if your still having problems.

Tip:

Mac Shield is a fake rogue anti-spyware (malware)

http://www.bleepingcomputer.com/virus-removal/remove-mac-shield

What OS are you running I took it to be windows ?

Anonym · Answer

That could be a rootkit. Try these on bleeping computer the antispyware and the malwarebytes rootkit. 

http://www.bleepingcomputer.com/download/windows/

Chris Ancor · Answer

Try AVG free edition.

Anonym · Answer

If it's a malware, these two will remove it:
http://www.malwarebytes.org/products/malwarebytes_free/
and
http://www.eset.com/us/online-scanner/

How to remove this link virus?

4 Antworten