PDA

View Full Version : Win32/AutoRun.KS worm


Lionel
8th December 2008, 07:15 PM
Hi All,

I have a Sandisk Cruzer 4G USB memory stick, which I use to transfer sound files between a work computer and mine at home. Lately, when I plug in the memory stick at home my antivirus (Eset NOD32) lights up warning me of Win32/AutoRun.KS worm being present. I am able to delete this with no problems, but I think that this work computer is infected with the AutoRun.KS worm virus

The engineer at work is very sceptical, and is blaming my USB stick. It has its own Cruzer utilities on it which install every time you use it, and enables file handling, and safe removal of the USB stick without using the normal windows taskbar icon. He thinks there is some conflict (!?) which is being wrongly interpreted as a worm virus!

Who is right? Has anyone had any problems with this virus? I am sure my computer is OK, as I can re-use the USB stick on other computers with no problems, provided I have deleted the Autorun.inf file, which always ends up on my USB stick after contact with the work computer.

Any info would, as always, be greatly appreciated.

Cheers,

Lionel
HangOver
9th December 2008, 01:37 AM
What your tech guy says is possible, but also the virus you mention speads via mapped/usb drives so also infection is possible.

What I would do is reformat your USB drive and not reinstall the utilities.

To prevent data loss with USB drives just wait till its finished copying data before you remove it. I have yet to loose data on a USB drive due to USB removal. Had a few just die but thats a different issue.
Lionel
9th December 2008, 07:14 AM
What your tech guy says is possible, but also the virus you mention speads via mapped/usb drives so also infection is possible.

What I would do is reformat your USB drive and not reinstall the utilities.

To prevent data loss with USB drives just wait till its finished copying data before you remove it. I have yet to loose data on a USB drive due to USB removal. Had a few just die but thats a different issue.

I have now reformatted the USB drive, as I don't really need the utilities, and I'll see what happens when I next transfer files.

Cheers,

Lionel
Lionel
14th December 2008, 04:43 PM
I have now reformatted the USB drive, as I don't really need the utilities, and I'll see what happens when I next transfer files.

Cheers,

Lionel

Yes, definitely a worm virus on the work computer. It'll be fun telling the tech guy that his precious computer is infected! :p

Cheers,

Lionel