Member Avatar for coolanvesh

this stupid virus suddenly came up and it is not stopping even it it is deleted its coming back again the bit defender box keeps popping up plss help me
i alrdy tried malwarebytes its stil there plss help

  • 2 Contributors
  • 3 Replies
  • 124 Views
  • 13 Hours Discussion Span
  • Latest Post Latest Post by jholland1964

Dani AI

Generated

Autorun.inf infections commonly persist because the malicious file lives on removable media or because a hidden helper process keeps recreating it. reports the immediate problem is gone, but confirmation and a few follow-up checks are important so the infection does not return when a USB or card is reconnected.

Basic verification steps that are safe and effective: enable viewing of hidden and protected OS files (Folder Options -> View), inspect the root of every removable drive for unfamiliar EXE/VBS files, and check startup/task entries and services for unknown items. From an elevated command prompt, clear common file attributes on the drive root and remove leftover autorun files before reconnecting media:

attrib -s -h -r X:\autorun.inf
del X:\autorun.inf

(Replace X: with each removable drive letter; run from Safe Mode or an elevated prompt when possible.) Exercise caution: only remove files that are clearly malicious, and keep backups of user data.

Persistent reinfection often comes from infected restore points, scheduled tasks, or a secondary payload in the root of a removable drive. After a verified clean, create a fresh system restore point and disable AutoPlay/Autorun for removable media to reduce future risk. If uncertainty remains, an offline rescue scan (bootable rescue environment) will catch components running outside the normal OS session.

As noted by , confirmation is best done with full scan output and a complete startup/autorun listing so entries can be reviewed. Useful artifacts for follow-up are the complete anti-malware scan log and a text listing of the root of each removable drive (filenames plus attributes). These allow a definitive check that nothing hidden or persistent remains.

Recommended Answers

All 3 Replies

Member Avatar for jholland1964

We cannot offer any suggestions until we see some logs. Post a MBA-M log.

Member Avatar for coolanvesh

it is solved i tried malwarebytes again :) n it worked

Member Avatar for jholland1964

How can you be certain? You should post the MBA-M log here along with a Full Scan log from HiJackThis

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.