The Motorola Development Community


Go Back   MotorolaFans.com Forums > Motorola EZX Phones > E6 General Chat
Notices

E6 General Chat Motorola ROKR E6 is somehow a candybar version of the A1200 as they functions very similarly but with far more multimedia capabilities!

Reply

MotoFans NWBE

Join Date: Sep 2007
Posts: 14
Thanks: 0
Thanked 3 Times in 2 Posts
Quote  
#1
09-25-2007
Default Autorun.inf, RECYCLIER & SYSOS.EXE Virus (also called Julyupan Virus)

Hi,

While transferring data between different USB memory devices (including my MOTO SD card) i found that i had got a virus file stored in my SD card. This file jumps from USB to USB devices.

It creates a folder RECYCLIER & a file Autorun.inf in your card. Trying to delete it from the phone or using an app like HorsePower doesn't work. Luckily i didn't have any of my data/files deleted from PC or SD.

Follow the steps mentioned at the below link to remove it from your PC (thanks to Alex)

http://www.alexpc.co.uk/blog/

Ciao

PS: the text from the above link is as below

It seems there is a new virus floating around, this weekend I saw two infected ‘Win XP’ machines. At first look it does not seem to be too serious but can easily spread from pc to pc.

The virus has two obvious names - ‘julyupan’ and ’sysos’.

When you insert any media into your PC - e.g. CD’s or USB Memory sticks the virus pops up with a message saying “cant create autorun.inf, access is denied”.

On the top corner of the message box is some text saying - ‘julyupan’.

This virus can easily spread and i have seen this myself, if you use a USB memory pen it can infect files on it, meaning when you plug it into another PC it will jump.

Removing the Virus

1. Press CTRL+ALT+DEL to bring up the ‘Taskmanager’
2. Go into Processes and look for one called ’sysos.exe’ (if this is not present or you do not get the above errors then you do not have the virus)
3. If you find the ’sysos’ in the list, left click on it and click ‘end process’
4. Click on the start menu and click ’search’, in the field type ’sysos.exe’, check in the advanced options and ensure ’search hidden and system files’ is checked
5. Delete any files that you find relating with the name ’sysos.exe’
6. Click on the start menu and click ‘Run’, in the field type ‘Regedit.exe’
7. In the window that opens click on ‘my computer’ and click ‘edit’ then ‘find’
8. In the field, again type sysos.exe and click ‘find’
9. The one result you are interested in looks like this - “C:\Windows\System32\sysos.exe Explorer.exe”, Explorer.exe is the main windows interface, the text at the beginning is not wanted. This is how the virus loads itself each time your PC starts.
10. Delete all the text and leave ONLY ‘Explorer.exe’, click ok and close Regedit.
11. Reboot your PC and test with a CD, you should be virus free, ensure to format any Removable devices you have used in case they are infected.

Screenshot to follow soon…

Alex
Reply With Quote


User Information
Current Phone: +1-517-694-6932
aragon_baggins is offlineReport Post
The Following User Says Thank You to aragon_baggins For This Useful Post:
Wolf (01-11-2008)
MotoFans NWBE

Join Date: Jan 2008
Posts: 1
Thanks: 1
Thanked 0 Times in 0 Posts
Quote  
#2
01-11-2008
Default

Thank you the most helpfull info, I have been battling with this virus for a while now, it even infected my Garmin and HTC Mobile
Reply With Quote


User Information
Wolf is offlineReport Post
MotoFans JUNR

pakure's Avatar

Join Date: Aug 2007
Posts: 67
Thanks: 10
Thanked 3 Times in 3 Posts
Quote  
#3
01-13-2008
Default

this is the same as "usb worm" that spreads by usb drives.....it will "ban orkut, firefox and youtube".............muuuaaaaaaahhh!
Reply With Quote


User Information
Current Phone: motorokr e6
pakure is offlineReport Post
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


All times are GMT. The time now is 06:00 AM. Search Engine Friendly URLs by vBSEO 3.2.0 Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd. VBulletin Skin by ForumMonkeys.