ronweasley
Broken In
hi,
im using a windows xp pc with avg free a/v, and zonelarm free firewall, and all windows updates installed as of now
my problem is......whenever i insert my flashdrive into my pc....2 files get created.....:
autorun.inf with the following code
[Autorun]
open=MicrosoftPowerPoint.exe
shellexecute=MicrosoftPowerPoint.exe
shell\Auto\command=MicrosoftPowerPoint.exe
and a program called "MicrosoftPowerPoint" which has the icon of a folder...
this is happening even after formating and reinserting the flashdrive....
the problem started after a friend of mine borrowed my flashdrive and returned it...after which i found the above two files and some more......a file called "Funny scandal.avi"...which i found was an application..............after de;eting all those....the above mentioned problem keeps occuring.....
is this a virus attack.......?????
thanks,
ronweasley
PS: avg antivirus never detected anything on the drive....but it indicated that the shell32.dll file (in the c:\windows\system32 directory) was changed
im using a windows xp pc with avg free a/v, and zonelarm free firewall, and all windows updates installed as of now
my problem is......whenever i insert my flashdrive into my pc....2 files get created.....:
autorun.inf with the following code
[Autorun]
open=MicrosoftPowerPoint.exe
shellexecute=MicrosoftPowerPoint.exe
shell\Auto\command=MicrosoftPowerPoint.exe
and a program called "MicrosoftPowerPoint" which has the icon of a folder...
this is happening even after formating and reinserting the flashdrive....
the problem started after a friend of mine borrowed my flashdrive and returned it...after which i found the above two files and some more......a file called "Funny scandal.avi"...which i found was an application..............after de;eting all those....the above mentioned problem keeps occuring.....
is this a virus attack.......?????
thanks,
ronweasley
PS: avg antivirus never detected anything on the drive....but it indicated that the shell32.dll file (in the c:\windows\system32 directory) was changed