Chess.exe worm removal?

aliEnRIK

c.ovis wrote: »

Jesus, after many hours

I've finally sorted it.

Like everybody else i thought the virus was on my computer transferring the virus onto my memory stick, logical thinking

It's the exact opposite, the virus is actually on the memory stick and transferring itself onto my computer.

It activates when plugged into a computer that has not got the virus and then instals itself onto the host computer (a parasite)

No wonder i was coming across the same TDSServ virus on so many computers that i was repairing.

I was actually infecting them with my own memory stick whilst installing programs to detect them.

I've formatted the stick but it still stays on there and appears each time when inserted into a new host computer.

Clever, very clever

I've had no problems since "binning" the infected memory stick and using a new one

jesus

Ive NEVER heard of that before! Did you only do a quick format or a full one?

thomas01155

USB disinfector if you need it Download. Make sure your memory stick is in the drive when its ran or you could format it from a linux computer.

Flash_Disinfector.exe by sUBs and save it to your desktop.

• Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
• The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.
• Wait until it has finished scanning and then exit the program.
• Reboot your computer when done.

Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive that is plugged in when you ran it. Don't delete this folder...it will help protect your drives from future infection.

c.ovis

Are you sure about FLASH_DISINFECTOR.EXE

Have a read here

http://www.prevx.com/filenames/481911913742901012-X1/FLASH5FDISINFECTOR2EEXE.html

http://www.pctools.com/forum/showthread.php?t=55577

Reluctant_spender

Flash_Disinfector is a safe programme to run - I have used it myself on many occasions

sarrous

Thanks to those who have had some tips on removal.
Is anyone running a server/network?

I ask because I am, And the virus has reappeared on the servers HDD every week for the last 3-4 weeks. Always on the Thursday and around 8:23 - 8:45am.

This was strainge in it's self but yesterday I lost All Web/Email due to BT access going down. But this morning (Friday) At 8:23 the chess.exe program reappears.

I have to point out that it only puts the Chess.exe and the Autorun files on my servers C drive.

My Virus check see it the minute that any one opens the server drive up.
And then kills it.

It always leaves the Autorun file Which is remeved Manually.

So Going on this I'm Camping at the machine waiting for Friday 8:23 next week to come round and see if it starts again.

Many thanks
Sarrous

gjseymour

I can't believe this thread!

Computer has virus - virus infects removable media (or network share) - removable media (or network share) connected to another computer - other computer infected! Formatting the drive whilst in an infected computer solves NOTHING! It will just get re-infected.

If you cannot remove the virus by following the instructions on here then destroy your computer or go on a PC Maintenance course, DO NOT get it repaired in a shop it's a waste of money as you'll only get another virus!

aliEnRIK

gjseymour wrote: »

I can't believe this thread!

Computer has virus - virus infects removable media (or network share) - removable media (or network share) connected to another computer - other computer infected! Formatting the drive whilst in an infected computer solves NOTHING! It will just get re-infected.

If you cannot remove the virus by following the instructions on here then destroy your computer or go on a PC Maintenance course, DO NOT get it repaired in a shop it's a waste of money as you'll only get another virus!

wow ~ now theyre AWESOME instructions :rolleyes: