TROJ_DOWNAD.MJV

To identify and delete AUTORUN.INF files created:

For Windows 2000, Windows XP, and Windows Server 2003:

1. Right-click the Start button then choose Search... or Find..., depending on the version of Windows you are running.
2. In the File name* input box, type:
   AUTORUN.INF
3. In the Look in: drop-down list, select a drive, then press Enter.
4. Select the file, then open using Notepad.
5. Check if the following lines are present in the file:
    
   • {multiple lines of garbage}
   • icon=%syStEmrOot%\sySTEM32\sHELL32.Dll ,4
   • {multiple lines of garbage}
   • shelLExECUte=RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
   • {multiple lines of garbage}
6. If the lines are present, delete the file.
7. Repeat steps 3 to 6 for the remaining AUTORUN.INF files in other remaining removable drives.
8. Close Search Results.

For Windows Vista, Windows 7, Windows Server 2003, Windows 8, Windows 8.1, and Windows Server 2012:

1. Open a Windows Explorer window.
   • For Windows Vista, 7, and Server 2008 users, click Start>Computer.
   • For Windows 8, 8.1, and Server 2012 users, right-click on the lower left corner of the screen, then click File Explorer.
2. In the Search Computer/This PC input box, type:
   AUTORUN.INF
3. Select the file, then open using Notepad.
4. Check if the following lines are present in the file:
    
   • {multiple lines of garbage}
   • icon=%syStEmrOot%\sySTEM32\sHELL32.Dll ,4
   • {multiple lines of garbage}
   • shelLExECUte=RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
   • {multiple lines of garbage}
5. If the lines are present, delete the file.
6. Repeat steps 3 to 5 for the remaining AUTORUN.INF files in other remaining removable drives.
7. Close Search Results.