Gizmos Freeware Reviews  

Go Back   Gizmo's Freeware Forum > Freeware Forum > General Computer Support

Reply
 
Thread Tools Display Modes
Old 31. Jan 2011, 10:37 PM   #1 (permalink)
Member
 
swaoamit's Avatar
 
Join Date: Dec 2010
Location: Worldwide !
Posts: 22
Exclamation oraolauski.exe

Hi Guys,

I don't know where this came from in my USB; because I never share my USB with anyone or any other PC. But I do lots of downloading stuff regularly; mostly new softwares. Is this oraolauski.exe come with any downloaded soft? But I do not copy it on my USB, so how could it get infected? uhhhh..... it's bull xxxx

When I plug in my USB yesterday night for create a Bootable Slax USB (Slax is a tiny Linux OS) with LinuxLive USB Creator, it's just can not get formatted. Then I log off & starting manual format of USB (Right Click on USB drive and Format Option) and it's done.

For second opinion I recheck it and suddenly I saw Autorun.inf file on USB; then I realize it's got infection. Because autorun.inf is not a hidden file so what it RUN ?

I shifted all my power to get rid from it but no luck. So, I download Panda USB Vaccine and test it with my USB; firstly I do not see anything at all except autorun.inf but when I open my USB as Portable Media Devices I see a folder pogodjenpao and under it I spotted oraolauski.exe .


But what is it? Is that spyware or Trojan? I do search on google but nothing useful in there.

Any Help...........

Thanks !
swaoamit is offline   Reply With Quote
Old 31. Jan 2011, 11:51 PM   #2 (permalink)
J_L
Co-Author, Best Free Security List
 
J_L's Avatar
 
Join Date: Dec 2008
Posts: 1,475
Default

Upload it to VirusTotal and Comodo Instant Malware Analysis. Then post back your results.
J_L is offline   Reply With Quote
Old 01. Feb 2011, 12:33 AM   #3 (permalink)
Member
 
swaoamit's Avatar
 
Join Date: Dec 2010
Location: Worldwide !
Posts: 22
Exclamation

Quote:
Originally Posted by J.L. View Post
Upload it to VirusTotal and Comodo Instant Malware Analysis. Then post back your results.
How can I do ? The oraolauski.exe is hidden file; I can not get copied or delete from USB. Even the folder pogodjenpao is also hidden.


Here is Snap Shots -

Any Help................

Thanks !
Attached Images
File Type: jpg Regular.JPG (23.0 KB, 7 views)
File Type: jpg Suspicious.JPG (39.1 KB, 11 views)
swaoamit is offline   Reply With Quote
Old 01. Feb 2011, 01:48 AM   #4 (permalink)
Senior Member
 
wdhpr's Avatar
 
Join Date: Sep 2008
Location: The north Coast
Posts: 1,117
Default

Try deleting the files/folder using Unlocker. It can be found here.

To view hidden files/folders follow these instructions: (For Vista)


1) Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.

2) Click the View tab.

3) Under Advanced settings, click Show hidden files and folders, and then click OK.


To see hidden files/folders: (For XP)

1) On the Tools menu in Windows Explorer, click Folder Options.

2) Click the View tab.

3) Under Hidden files and folders, click Show hidden files and folders.

Note To access Windows Explorer, click Start, point to All Programs, and then click Windows Explorer.

Good Luck
Wdhpr
wdhpr is online now   Reply With Quote
Old 01. Feb 2011, 08:52 AM   #5 (permalink)
Moderator
 
Join Date: Jul 2008
Location: India
Posts: 9,484
Default

swaoamit, you wrote in your post that you were able to format the USB drive, by right clicking on it. So, after the successful format... you could still see the files there, on opening the drive? If yes, then your computer might be infected, and I would suggest scanning your computer first.

I hope you have a good antivirus installed. Make sure it has the latest definitions. Do a full scan of your computer with it. I would also suggest scanning the computer with MalwareBytes Antimalware, and Superantispyware.

To upload the files to VirusTotal as suggested by J.L.... do this.

Open in your browser : www.virustotal.com. Then under Upload a file, click the Browse button, and choose the suspected file that you want to upload. Send file, and wait for the results. You can post the link of the result page here.

Most probably, its a virus infection.

I would also suggest that during the scans, disconnect the PC from internet, and then do the scans. Make sure the definitions for the security software are up to date first.
__________________
Anupam
Anupam is online now   Reply With Quote
Old 09. Feb 2011, 01:20 PM   #6 (permalink)
Member
 
swaoamit's Avatar
 
Join Date: Dec 2010
Location: Worldwide !
Posts: 22
Exclamation

Quote:
Originally Posted by wdhpr View Post
Try deleting the files/folder using Unlocker.
I download it run it; But it's not very helpful. Thanks for reply.

Quote:
Originally Posted by Anupam View Post
.....I would also suggest scanning the computer with MalwareBytes Antimalware, and Superantispyware.
I scan my PC with both MBM and SAS; But these two well know ANTI-MALWARE programs can't even detect any file at all in USB drive. And to clarify I do scan my PC once in a week with MBM and SAS.

Quote:
Originally Posted by Anupam View Post
To upload the files to VirusTotal as suggested by J.L.... do this.....
Well I think I gave an reply here before to J.L.

--------------------------------------------------------------------------------------------------------


Guys,
I think I got an answer for oraolauski.exe problem, here is how I solve it -

1] I scan my USB drive with AVAST and it detect & delete oraolauski.exe (I use Avira before but it didn't detect it).

2] But AVAST can't delete the folder pogodjenpao and AUTORUN.inf file; so I format the USB with windows right option. But AUTORUN.inf is very sticky.... it's can't be deleted with windows format option.

3] So, I download and install HP USB Disk Storage Format Tool and formatted USB with it and voila.......... my USB is now all clear & clean.

Thanks !
swaoamit is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT +1. The time now is 02:28 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 PL2