What is autoit?

Autoit is a Win Worm 32

Symptoms:

It Contains 1 Folder 2 Files

It'll store in your System Folder and

The Path is Like this in your External Drives ...

CONTROL\ Autorun.exe
CONTROL\ Desktop.inf

When Ever you click on that Folder .. you 'll get Control Panel Window

Remove autoit virus from External Drive

1). Open Command Prompt

RUN > cmd > Enter

2). Change Command Prompt to your External Drive

C:\ X: [X: is your Ext.Drive Letter]

3). Type This Command from X:\ Path

Attrib /s -s -h -r *.* (PRESS Enter)

Now you 'll See The Folder Control in your Drive

X:\CD CONTROL - (PRESS ENTER)

X:\Del /f *.*

Now Remove CONTROL Folder From Windows.........

Now Restart your computer and you are done.

Autoit removal

Boot into safe mode

End the killer.exe process from the task manager

Go to start- > run type attrib -s -h C:\windows\*.* (PRESS ENTER)

Go to the windows folder and create two files by name smss.exe and killer.exe

Type attrib-s -h d:\*.* and so on for all drives

After typing for a particular drive..
go to that drive and create these files..i.e smss.exe and killer.exe

IMPORTANT--do not double click to open the drives..

iInstead type the drive name in the address bar and navigate..

Restart your computer ...that's all

How to Delete autoit virus.

Search the computer for "mschr.exe" by clicking Start > Search > All Files or Folders.

Write down the location of the folder containing the files, as you will need this information later.

Remove the viral process using Windows Task Manager by pressing "Ctrl + Alt + Del" on the keyboard.

Look for "mschr.exe" under Image Name.

Highlight the viral process and click "End Process."

Delete any remaining virus files by clicking Start > Run > (type) cmd and click "OK."
Type in the Dir:/folder name from Step 1.
Example C:\%SYSTEMROOT%\system32\

Delete all the files by typing "del filename."
Example: del mschr.exe

Edit the Registry by clicking Start > Run > (type) regedit and click "OK."

Search the registry keys for the following and right click on each registry key and click "Delete."

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHO WALLCheckedValue = dword:00000000

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\SvcHost, netsvcs = %Previous data% and %Random%

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[random]\ParametersServiceDll = %MalwarePath%

Restart your PC and now you are successful in hunting the autoit virus.