GooD.exe Threat? / How bad school PC's suck...

[killkhergit]

So, lately I've got this 'thing' nestled in my usb drive's RESTORE folder/bin. AVG tells me to heal the thing every time I plug my drive into the laptop. A file called autorun.inf (it's a hidden system-file) tells the thing to execute ([autorun][/autorun]).

And every time I heal it with AVG 8.0 it just reemerges.



The last things I did were:

- Used it at school, pasted some .doc files in it. (innocent?)
- Copied the fallout smiley to the drive to use it as it's main icon.

It's scary. Anyone call explain about it?

 

[Elenmmare]

Kill it with fire.

 

[Cymro]

Delete the autorun.inf file, then view hidden files and delete that exe. Your flash pen has likely been infected with a trojan from the school's system, which has now infected your computer. Scan the computer and the pen.

 

[killkhergit]

Delete the autorun.inf file, then view hidden files and delete that exe. Your flash pen has likely been infected with a trojan from the school's system, which has now infected your computer. Scan the computer and the pen.

I'll try installing an actual antivirus/spyware program on my computer (not the laptop). I doesn't even have an internet connection, so who cares? 

Now that damned school network (admin there confirmed it) tried assassinating it!



AVG dealed with the trojan.

Thanks for the help.

 

[jlgx50]

So, lately I've got this 'thing' nestled in my usb drive's RESTORE folder/bin. AVG tells me to heal the thing every time I plug my drive into the laptop. A file called autorun.inf (it's a hidden system-file) tells the thing to execute ([autorun][/autorun]).

And every time I heal it with AVG 8.0 it just reemerges.



The last things I did were:

- Used it at school, pasted some .doc files in it. (innocent?)
- Copied the fallout smiley to the drive to use it as it's main icon.

It's scary. Anyone call explain about it?

I had a problem pretty close to that on my USB a few months ago, I had the "power point" virus that left anautorun ini file on there aswell, I got the virus from the uni library or from one of the class rooms

anyway use Avast, that fixed the problem for me

 

[Cymro]

Do your schools, libraries or universities allow standard users to run exe files?

 

[arbites_augmented]

Mine does, so I can play DF and Age of Empires 2 allllllllllllll day.

 

[leprechaun]

Ours don't.


Technically 

 

[Lyze]

Mine does, so I can play DF and Age of Empires 2 allllllllllllll day.

Holy ****? You're at a school that has computers... that can run games less than ten years old?
Hot damn.

 

[killkhergit]

Mine does, so I can play DF and Age of Empires 2 allllllllllllll day.

Holy ****? You're at a school that has computers... that can run games less than ten years old?
Hot damn.

Confirm that. Suckish Intel GMA ****. With 1024mb  of shared RAM.

Yes, the admin are noobs.

 

[Tuckles]

The best we can do in our school is Warcraft III and OpenLieroX. 

 

[G36E]

Confirm that. Suckish Intel GMA ****. With 1024mb  of shared RAM.
Yes, the admin are noobs.

. That much RAM? For a school PC!?

 

[killkhergit]

Confirm that. Suckish Intel GMA ****. With 1024mb  of shared RAM.
Yes, the admin are noobs.

. That much RAM? For a school PC!?

Shared graphics. Remaining 1GB for the CPU.

They even installed some Intel E8400 CPU's a few weeks ago. In combination with not-too-bad GPU's.

Gaming ftw!

Especially Postal2 and Doom3.

 

[G36E]

Ah ****. My previous school had 1.3GHz P3, 128MB Intel GMA, 256MB RAM and Windows 98.

 

[Archonsod]

Pfft. My school had DOS running on a 286. It could manage Lemmings, but moving the rook in Battlechess caused horrendous slowdown.

 

[G36E]

You're twelve years older than me, doesn't count,

 

[Sedericus]

i would check your laptop. we have just had an outbrake of a a virus that spread just by plugging in a usb device into the machine. it was first found on the 22nd of april so its a new little sod.

http://www.threatexpert.com/report.aspx?md5=91569358986d00d8f5c18e14b834d3c6

that help us beat the little bugger. i also have documentation written myself if you have that virus on how to get rid of it.

basically go into windows>system32 and search for the files fow64.dll/fos64.dll.

 

[gamerwiz09]

My school has super crappy computers. Most websites are blocked, and EVERYTHING is over the network, which means they're extremely slow, especially in the morning when everyone in the city is logging on. Students only get like 1GB of HDD space which is a pain in the ass if you take an advanced computer class like Web Page or Graphic Design and have to save a ton of possibly large ****, although I keep most stuff on a USB anyways. Most of the computers are at least 5 years old. We wouldn't be allowed to play games even if we could get them to run in the first place.

 

[GhostsInTheSnow]

We've got cruddy computers too but, seeing as they are personal use/issued laptops that can run M&B, can't complain too much

 

[Cymro]

Our school accounts are usually limited to about 80MB of disk space, perhaps up to 500MB for those taking art, graphics or technology. The majority of the PCs have 128MB of RAM, with a few going up to a whopping 512MB. Executables of any kind will not run. On a good note, however, there has never been a virus on the school system (conficked flash pens, for example, just wouldn't open as easily).

The only exception to any of these is a solitary computer for electronics students in the physics lab, which has 1GB of RAM and a large hard disk in order to run the CAD software properly. It also doesn't block executables, and as such was at one point infested with all manner of vile creations.