Hi,
While transferring data between different USB memory devices (including my MOTO SD card) i found that i had got a virus file stored in my SD card. This file jumps from USB to USB devices.
It creates a folder RECYCLIER & a file Autorun.inf in your card. Trying to delete it from the phone or using an app like HorsePower doesn't work. Luckily i didn't have any of my data/files deleted from PC or SD.
Follow the steps mentioned at the below link to remove it from your PC (thanks to Alex)
http://www.alexpc.co.uk/blog/
Ciao
PS: the text from the above link is as below
It seems there is a new virus floating around, this weekend I saw two infected ‘Win XP’ machines. At first look it does not seem to be too serious but can easily spread from pc to pc.
The virus has two obvious names - ‘julyupan’ and ’sysos’.
When you insert any media into your PC - e.g. CD’s or USB Memory sticks the virus pops up with a message saying “cant create autorun.inf, access is denied”.
On the top corner of the message box is some text saying - ‘julyupan’.
This virus can easily spread and i have seen this myself, if you use a USB memory pen it can infect files on it, meaning when you plug it into another PC it will jump.
Removing the Virus
1. Press CTRL+ALT+DEL to bring up the ‘Taskmanager’
2. Go into Processes and look for one called ’sysos.exe’ (if this is not present or you do not get the above errors then you do not have the virus)
3. If you find the ’sysos’ in the list, left click on it and click ‘end process’
4. Click on the start menu and click ’search’, in the field type ’sysos.exe’, check in the advanced options and ensure ’search hidden and system files’ is checked
5. Delete any files that you find relating with the name ’sysos.exe’
6. Click on the start menu and click ‘Run’, in the field type ‘Regedit.exe’
7. In the window that opens click on ‘my computer’ and click ‘edit’ then ‘find’
8. In the field, again type sysos.exe and click ‘find’
9. The one result you are interested in looks like this - “C:\Windows\System32\sysos.exe Explorer.exe”, Explorer.exe is the main windows interface, the text at the beginning is not wanted. This is how the virus loads itself each time your PC starts.
10. Delete all the text and leave ONLY ‘Explorer.exe’, click ok and close Regedit.
11. Reboot your PC and test with a CD, you should be virus free, ensure to format any Removable devices you have used in case they are infected.
Screenshot to follow soon…
Alex