Expert: Lorry - 11/19/2007

Question
Hi, i'm a Network Admin and i'm having problems with a virus that is creating about five, ten autorun.inf every minute im my server. A aplication that came with the mobo drivers say that there's a file infected, the ctfmon.exe. i 've tried to remove it, but that appears that the file was created again. Then i found your question about a problem that appears with mine and i'm sendind this message to ask u if u have solved it. Thanks.

Answer
Hi Dan,

Check out the following for information:

http://www.viruslist.com/en/viruses/encyclopedia?virusid=160221

Another thing you could do would be to open Internet Explorer and go to:

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Click the GO button, then under Virus Detection, click Start. You might be told that you need to download and install ActiveX Controls for the scan to work, answer Yes.

Write down exactly anything it finds, then go to: http://www.symantec.com/search/  and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually. Make sure that you follow the instructions for removal, step by step, especially the part regarding disabling System Restore.

Hope this helps!
Lorry