Chess.exe worm removal?

larnos1704

I have the same problem. I am confused as to whether SDFixe.exe actually gets rid of the problem or whether it just enables a techie to review the results of what exactly is happening.

Reluctant_spender

SDfix - should remove the entry and therefore fix the problem, always assuming that there is nothing else hiding!

thesquire

Hello's!

I've just tried to run the SDfix in safe mode, however after saving it to my desktop in normal mode & then rebooting the file (in safe mode) had gone?

SO, I've not done it..

All this said I have also scanned with AVG Free (Did this with all up-dates loaded on todays date) and it does seem to have been removed. If I plug flash drives or iPods into the PC they seem to be coming up under there own names and look to be ok.

Am I?

How would I know? Anyone know??

astro_crowe

Hi there guys.

I've tried pretty much everything listed here, but I still get the chess.exe pop up when I insert a USB stick, or my ipod etc.

AVG free 2008 SOMETIMES picks it up when I insert, but sometimes it doesn't.

It getting really annoying now as I daren't type any passwords in and go on important stuff like online banking and ebay/paypal etc.

Do you think it's worth taking it into a shop or paying for virus software to fix it?

God i hate viruses :mad:

aliEnRIK

astro_crowe wrote: »

Hi there guys.

I've tried pretty much everything listed here, but I still get the chess.exe pop up when I insert a USB stick, or my ipod etc.

AVG free 2008 SOMETIMES picks it up when I insert, but sometimes it doesn't.

It getting really annoying now as I daren't type any passwords in and go on important stuff like online banking and ebay/paypal etc.

Do you think it's worth taking it into a shop or paying for virus software to fix it?

God i hate viruses :mad:

Have you updated and run a FULL scan with AVG with ALL your usb devices plugged in? (As they could easily be infected too)
Have you run malwarebytes?
Dont pay anyone anything, we should be able to sort it out for you

LemonZeppelin27

I had the same problem. Chess.exe instead of my memory stick name. Tried to open chess.exe but thankfully, my internet security program (Kaspersky Internet Security 2009) blocked it from running. I backed up my files, formatted the memory stick, copied my files back and everything works fine now. The chess.exe has been replaced with the regular device name and there is no sign of the virus. (I got into the memory stick when the window came up, with the option 'Open folder to view all files'. That's how I copied my stuff back to my laptop.)

zojo_2

We had the same problem on our network. We found that it was caused by a hidden file called autorun.inf which was in the root of all drives and redirected the drives to chess.exe.

You need to turn OFF autorun on your PC.

Delete the autorun.inf (it is probably on your USB sticks, and possibly also on your C drive)

In the registry you may find that some additional folders have been added. Go to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2

Within this are listed all your mapped drives
e.g. ##SERVERNAME#SHARENAME


If the drive has no subfolders it is fine. If it has, look for two named autorun and shell . Delete these and the drive will behave normally again.

No AV product seems to pick this one up. If your PC has autorun disabled it will not affect you. :T

foreversomeday

zojo wrote: »

We had the same problem on our network. We found that it was caused by a hidden file called autorun.inf which was in the root of all drives and redirected the drives to chess.exe.

You need to turn OFF autorun on your PC.

Delete the autorun.inf (it is probably on your USB sticks, and possibly also on your C drive)

In the registry you may find that some additional folders have been added. Go to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2

Within this are listed all your mapped drives
e.g. ##SERVERNAME#SHARENAME


If the drive has no subfolders it is fine. If it has, look for two named autorun and shell . Delete these and the drive will behave normally again.

No AV product seems to pick this one up. If your PC has autorun disabled it will not affect you. :T

Brilliant - thanks! It managed to get itself onto my \ drive, which contains a read-only CD, as well as the C:\ drive.

grindin

I had this chess.exe problem leaking onto my digital cameras and memory sticks, i fixed it using microsofts onecare scanner

http://onecare.live.com/site/en-us/default.htm

Hope this helps!

c.ovis

Jesus, after many hours

I've finally sorted it.

Like everybody else i thought the virus was on my computer transferring the virus onto my memory stick, logical thinking

It's the exact opposite, the virus is actually on the memory stick and transferring itself onto my computer.

It activates when plugged into a computer that has not got the virus and then instals itself onto the host computer (a parasite)

No wonder i was coming across the same TDSServ virus on so many computers that i was repairing.

I was actually infecting them with my own memory stick whilst installing programs to detect them.

I've formatted the stick but it still stays on there and appears each time when inserted into a new host computer.

Clever, very clever

I've had no problems since "binning" the infected memory stick and using a new one