Member Avatar for POVSTA

Anyways guys, i have a desk top, and a laptop, but right now lets just talk about the laptop, My laptop will not let me install most antivirus programs, such as avira, AVG and and a few others, But the ones that i'm able to install is, AVAST, NOD 32, but both of them are not detecting any threats, And my MALWAREBYTES program won't up date, So i update it on my DESKTOP, and copy all the files to a usb from, the PROGRAMS, DATA, APP, and user folders, and then replace all of the files on the laptop, and thats the only way i can update it, but still, it is not detecting anything, same with spybot search and destroy, Does not detect anything either,
Why it is troubling me is this, Everytime i plug in a USB, there are these files in them thats hidden, Named = WINAMP.EXE,RUDLLE.exe,MALWAREBYTES.EXE, and the names keep on changing everytime i delete them with unlocker.
Even when i take out the stuf i have in them and reformatt it 10 times, They keep on popping back, I'll delete them, take my usb out, and when i put it back in the USB hub, what do you know, the EXE files are back, just a different name, always IN capital letters.... CAN SOMEBODY HELP ME PLEASE, AND TELL WHAT THIS COULD BE... THANKS

  • 2 Contributors
  • 1 Reply
  • 217 Views
  • 6 Hours Discussion Span
  • Latest Post Latest Post by crunchie

Dani AI

Generated

The symptoms described by — removable drives repeatedly showing different suspicious .exe files after formatting, AV installers failing on the laptop, and Malwarebytes only updating when files are copied from a clean desktop — are consistent with an autorun/USB‑propagating infection or a rootkit component that hides itself and reprovisions copies to removable media. That is a plausible explanation, not a confirmed diagnosis; the infection needs to be contained and investigated from a known‑clean environment.

Recommended containment and inspection steps:

  • Isolate the laptop (remove network access) and stop using it with other removable media to avoid spreading the infection.
  • From a known‑clean PC, create bootable antivirus rescue media (offline scanner) and boot the infected laptop from that media to run full, offline scans. Offline scans bypass many rootkit protections.
  • Use Autoruns (Sysinternals) or the desktop’s autorun/Startup inspection tools to find and disable suspicious autorun entries. Look for and delete any autorun.inf at a drive root.
  • Inspect a USB drive from a clean machine. To reveal hidden/system files on the USB, run:
attrib -s -h -r /s /d X:\*.*
dir /a X:\
del /f /a X:\autorun.inf

(replace X: with the USB drive letter). Removing attributes reveals what’s actually on the drive so it can be examined and cleaned.

If malware persists after offline scanning:

  • Backup only personal documents (no executables), scan those backups from a clean system, then reformat the laptop drive and reinstall the OS if needed. Persistent infections that block AV installation or updates are often best fixed by a clean OS install.
  • For stubborn rootkits consider specialized scanners (e.g., TDSSKiller) or professional help; a Linux live environment can also be used to remove locked files safely.

As noted, avoid duplicate threads and all‑caps in posts. The core sequence is: isolate → scan offline → unhide/inspect removable media → backup scanned data → rebuild if not fully cleaned.

Member Avatar for crunchie

Is there a difference between this post and this one; http://www.daniweb.com/forums/thread237451.html ?
If so, you need to put it in the thread title so that this one is not deleted as a duplicate.
And please do not use CAPITAL letters as it is taken as SHOUTING! If you need to emphasise a word, use italics or bold.

Edited by crunchie because: n/a
Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.