1

My mother's Windows XP system recently got infected with the SHeur trojan (SHeur4.ese). I was able to download and install Malwarebytes Anti-Malware in line with the advice here, but the modem was bringing up odd errors and thereafter was unable to go online. This makes things extra tricky, as I was helping from overseas via Logmein, and Malwarebytes can't update itself.

Still, Malwarebytes claims to have removed the infection, but I suspect that the modem may also be infected, and will reinfect the PC when it is plugged back in.

How do we disable Windows XP autoplay or otherwise prevent infection when she plugs it in, so that she can scan it?

Any other advice would also be welcome.

Gaff
  • 18,569
  • 15
  • 57
  • 68
francois
  • 229
  • 1
  • 6

1 Answers1

1

Microsoft has instructions here on how to disable autoplay: http://support.microsoft.com/kb/967715

There are manual ways and then there are patches you can download from the site to do it automatically.

The modem may show up as a USB memory stick and be given a drive letter. Scan that drive letter using MBAM and your local antivirus software.

music2myear
  • 40,472
  • 44
  • 86
  • 127
  • Thanks. I won't be able to download those patches, of course, but it looks like it will be possible by manually editing the registry. I'll have to talk my mother through it over the phone. In your opinion, will disabling autoplay make it safe to plug in the USB modem if it's infection? – francois Oct 21 '11 at 21:19
  • Well, manually editing the registry had the desired result. This article also helped me (shorter than the MS one): http://superuser.com/questions/37569/disable-autoplay-of-audio-cds-and-usb-drives-with-registry (Having less luck clearing the infection though.) – francois Oct 22 '11 at 20:49