Computer problem question

[Guest]

when I open up start/ my computer and try to open up any of the drives including my camera chip in a usb port I get:

""C:\recyled\boot.com is not a valid win 32 application ""

it did work untill a few days ago !!!

any thoughts from the wedgie experts ? thanks, Lewis

[Andy]

Re: Computer problem question

Operating system?

[Boston]

Re: Computer problem question

Googleing eror messages helps a lot,

From:

http://www.techsupportforum.com/micr...plication.html

1. Opened the My Computer
2. Right clicked the mouse on the drive having the infection.
3. Selected "Explorer" from the pop-up menu.
4. Went to the Menu bar and select Tools->Folder Option.
5. Select the View tap. and did:
a) selecting "Show hidden files and folders'
b) unchecking "Hide protected operating system files (recommended)"
6. Click OK.
7. I found the file named "autorun.inf" file in the root of each infected drive.
8. And I deleted the file. And I selected the other infected drive and delete all the "autorun.inf" files one by one.
9. Over the backup drive, I also deleted the "resycled" system folder as well. I think, this is the source of the infection. Or you could name it as the virus nest.
10. I went to the Desktop and open the Recycle Bin and Executed Empty Recycle Bin. It's a very important step to prevent the infection coming back!
10. Then, I rebooted the system.
11. And everyone was backed to work. Problem was solved or virus was removed, whatever you name it.
12 Of course, don't forget to change the View functions back over the "Folder Options" if they were not the original selections.

[Boston]

Re: Computer problem question

sorry brother,

http://www.precisesecurity.com/blogs...sycledbootcom/

resycled/boot.com is a worm that propagates on local fixed and removable USB drives. resycled/boot.com may infect drives via autorun.inf file it created that runs a command each time the drive is accessed. Malicious files will be copied to a drives attached on infected computer.

Aliases: Trojan Horse SHeur.CODS

Risk Level: Low

File Size: Varies

Affected System: Windows

Symptoms:
1. Appears a message “resycled/boot.com is not a valid Win32 application”
2. Presence of autorun.inf files on root of drive

[Guest]

Re: Computer problem question

i'm using XP

looks like i got the worm from a sd chip in the used camera i bought ..

looks like i can still get into the drives by right clicking and "explore"


so how do I get rid of the worm ?

[Andy]

Re: Computer problem question

www.malwarebytes.org

Best (and free, unless you want active file protection) anti-malware on the Internet, IMHO.

[Boston]

Re: Computer problem question

ya should be able get that chip clean too

[Guest]

Re: Computer problem question

Thanks, Andy; Boston.......... it took two tries to remove the worm from my computer with www.malwarebytes.org but it did not remove the worm from my infected sd chip----- so I wont be using the chip again