ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Getting rid of desktop.dll: Worm.Autorun-1851
Jeremias Johnson


Joined: 09 Jan 2011
Posts: 0
Reply with quote
How could I get rid of a virus named desktod p.dll: Worm.Autorun-1851, located in a pen drive?

Thank ou
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
You might try booting into Window Safe Mode With Networking and scanning the entire computer and then the USB stick with ClamWin. Some viruses can't hide when you scan in Safe Mode. There could be related malware on the computer in addition to the Autorun.inf (or similar file) on the USB. Oftentimes if you delete the .inf file, the related malware process in memory will re-deposit the autorun file on the USB.

If that doesn't work, get the free version of Malwarebyes and run a Quick Scan of your computer with it. If it finds something, quarantine/remove it and then see if there is any file on the USB that should not be there--delete it.

Plan C: install Microsoft Security Essentials and run a complete scan with it--after you have configured it to scan USB during a complete scan.

Plan D: make a rescue/boot CD from Bitdefender, F-Secure, or AVG and scan your computer with their Linux version of their AV. Then reboot with Windows and see if there is any file on the USB that should not be there--delete it. This is the fail-safe option but takes a long time--maybe 1-2 hours.

Regards,
View user's profileSend private message
Jeremias Johnson


Joined: 09 Jan 2011
Posts: 0
Reply with quote
Dear GuitaBob

I thank you very much for your help. It will take me some time to try the different options you offered and I still haven't succeeded. But, I insist. I do appreciate your help.

Regards

GuitarBob wrote:
You might try booting into Window Safe Mode With Networking and scanning the entire computer and then the USB stick with ClamWin. Some viruses can't hide when you scan in Safe Mode. There could be related malware on the computer in addition to the Autorun.inf (or similar file) on the USB. Oftentimes if you delete the .inf file, the related malware process in memory will re-deposit the autorun file on the USB.

If that doesn't work, get the free version of Malwarebyes and run a Quick Scan of your computer with it. If it finds something, quarantine/remove it and then see if there is any file on the USB that should not be there--delete it.

Plan C: install Microsoft Security Essentials and run a complete scan with it--after you have configured it to scan USB during a complete scan.

Plan D: make a rescue/boot CD from Bitdefender, F-Secure, or AVG and scan your computer with their Linux version of their AV. Then reboot with Windows and see if there is any file on the USB that should not be there--delete it. This is the fail-safe option but takes a long time--maybe 1-2 hours.

Regards,
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
I wish you well. I presented the options in the order that would be easiest to do and that do not require you to download any additional software. Most of the time, a scan with Malwarebytes will get rid of malware. Try a normal Quick Scan with it and then a Quick Scan in Safe Mode if the normal scan does not find anything. If a rootkit is hiding things, Security Essentials can find some rootkits, and the Rescue CD will find anything else for which it has a signature.

Once you get things cleaned up, you should use a real-time scanner and keep ClamWin as a backup, since it is not a real-time scanner. Security Essentials, AntiVir, Avast, and AVG are all good free scanners. If you want to use ClamWin as a real-time scanner, you can download the Clam Sentinel program (not related to the ClamWin project) at https://sourceforge.net/projects/clamsentinel/ on the web. Clam Sentinel with ClamWin is a good scanner if you are careful where you go on the web and on what you click--keep Malwarebytes as a backup.

Regards,
View user's profileSend private message
Getting rid of desktop.dll: Worm.Autorun-1851
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic