hi all,
I have got this ntdetec1.exe worm / virus /....
I can't delete it. When I go to the dir it shows no files.
All my folders contain a folder.exe file.
The taskmanager shutsdown auto after coming up in a while.
Also IE closes on it's own from time to time.
lastly the show hidden files folder options can't be changed ,
what should I do ?
thanks in advance

The best thing to do is to follow this http://wiki.castlecops.com/MRP

After following the link above if you think you're still infected with malware please post a Hijackthis log in this forum.

/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html


I also suggest you install Windows Defender (if you use Windows XP), which is free and is available from http://www.microsoft.com/athome/security/spyware/software/default.mspx

open command prompt and do a CD\ so that ur in the drive prompt... then type attrib and check if autorun.inf file is there. If its there then it would be having a SHR or SH attribute.

This is most probably a malware that spreads through USB Removable drives. Untill and unless the malware process is detected and deleted, these problems would keep infecting your system and any Removable drives inserted in the system.

What I can suggest at this moment is either you get the HJT logs and post it in the HJT forum of CC or you update your AV and disable system restore and do a full system scan from safe mode. If the full scan detects the malware then make sure u quarantine or delete the infected file and then log back in normal mode and see if the problem is reappearing. If the problem has been resolved then make sure to turn on the System Restore option again.

PS. Whenever you put a USB Removable drive in the system, then instead of opening the new drive straightway, open command window and from there go to the removable drives prompt and there type attrib. If it shows the presence of any autorun.inf file then delete that file with the command del/ah/f autorun.inf. These steps will stop the USB Autorun malwares from infecting your system.