PvilleStang
In Runtime
- Messages
- 152
- Location
- Republic of Texas
So I'm working on a laptop, and I've run into a interesting problem. On the C: drive, when you try to open it, the virus has put an autorun script on it telling it to query the recycler for a long file name (randomly created, gibberish). I delete the autoexecute file, and it is regenerated. I've come to the conclusion it's c:\pagefile that is creating it (I believe it's a .sys, but can't be certain). The size of the file is 2096204 KB and accessed in the last 10 minutes. It's not only a hidden file, but a hidden system file, so I had to have Win show the hidden protected system files in order to find them. Included in the virus package seems to be C:\pagefile, c:\autorun, and the c:\recycler folder. Any ideas here?