[sytheii]

I have not plugged my phone into my PC for literally like a year. I had it all set up the way I wanted it a long time ago, but once, about a month ago, i plugged it into my dads computer because i had downloaded some mp3s that I wanted to listen to on a car ride, i told the phone to go into Data Transfer mode, transferred the music over, disconnected.

Now doday, i decide to do a check of whether or not my phone software is up to date, so i plug in my phone, select Data Transfer, and immediately the folder window for F:\ pops up, and my ANTIVIRUS NOD32 pops up an incoming threat message that originates from F:\ which is my mass memory on my phone. I have included a screenshot of that message. And the message does not just pop up once, right after the 1st message goes away, it repeats itself, and continues to repeat itself ad infinitum.

After this happened, i reinstalled the latest phone software, and then formated the mass memory from the memory application on the phone, but NOD32 is still popping up this message. 

One thing I have noticed, is that if i set the phone to PC Suite after plugging in via usb, NOD32 does not display any messages. Is this auTORUN.inf, classified as a Win32/Peerfrag.DJworm a virus? I did a search on google, and although i could not get any definitive information on it, it appears to be some sort of exploit.

Does anyone know what this is? Or does anyone know of a way to WIPE CLEAN the phones internal and MASS memory? Does a program exist that can do this?

Any help is greatly appreciated, and thanks in advance. 

Message Edited by sytheii on 06-Nov-2009 02:17 AM

[sytheii]

Has no one really ever experienced anything like this? Bump.

[no1_slumko]

You can try searching for that file with an explorer application that shows system and hidden files like Y-browser or FExplore

I tried the former myself but the Dr Jukka application that it came with made my phone unstable. so I had to delete it, I don't know much about the later.

Chances are that virus can't harm your phone because it was not written for your phones operating system.

I know I managed to directly delet a number of viruses from my phone in this manner. Did you try formatting the card on the computer(via data transfer)

[deepestblue]

The 'virus' is there in your mass memory. Your PC is infected by a virus that is copying itself to removable storage devices.

Connect to your phone to a virus-free PC (a Linux PC is ideal) in Mass Storage mode, backup your data - music, videos, photos, map data, etc., and format it.

I would advise that you update the antivirus software and thoroughly scan the PC for viruses. It appears that the virus is copying itself into removable storage devices from your PC (or your dad's PC) .

Viruses for Windoze PCs will not affect your phone that runs Symbian

[sytheii]

---

no1_slumko wrote:

You can try searching for that file with an explorer application that shows system and hidden files like Y-browser or FExplore

I tried the former myself but the Dr Jukka application that it came with made my phone unstable. so I had to delete it, I don't know much about the later.

Chances are that virus can't harm your phone because it was not written for your phones operating system.

I know I managed to directly delet a number of viruses from my phone in this manner. Did you try formatting the card on the computer(via data transfer)

---

I browsed F:\ in explorer while in data transfer mode before...(just to verify, for the n95 8gb i believe the only modes are pc suite, data transfer,image print, media player,) and i made sure all files in f:\ were visible and not read only.

I did find 2 folders one named private, and anothe i believe called pb or something.

I tried deleting those, but i still was getting the message, and if the other guy who is posting on here thinks that my comp has a virus that is copying itself to portable media, then i have to fix the problem on my comp before i fix my phone...so i'm working on that at this forum:

http://forums.techguy.org/malware-removal-hijackthis-logs/874842-google-links-being-hijacked-i.html#...

Also, in regards to formating the mass memory of the N95 8GB, are you talking about connecting the phone to a pc in Data Transfer mode, and then going to My Computer, selecting the drive, and manually formatting it using windows? I thought of that but I was worried that it might be harmful to my phone...also Im not sure which file system to use....any thoughts on that?

Message Edited by sytheii on 06-Nov-2009 10:24 AM

[no1_slumko]

The explorer applications I'm talking about are supposed to be installed on your phone then you can use your phone to search for the virus and be able to see it because a virus cannot hide well from an operating system that it wasn't written for. That's why deepestblue and I both said the virus will not harm your phone.

Yes. Format using a PC that doesn't have a virus(Linux operating system as suggested above is IDEAL as that is clearly a windows virus)

Formatting on a PC will not harm your phone as it only has acces to the memory card(when connected via data transfer) you can even put the card in a card reader if you're really scared but I'm certain you have nothing to worry about.

The advice given above by deepestblue should solve your problem

[deepestblue]

If it were an N95, I would've asked our friend sytheii to use a card reader. But N95-8GB has the memory built-in, and no card slot. Therefore, the only way is to connect the phone in mass storage mode and proceed.

sytheii, let us know how it goes... And, throw some kudos, they mean a lot to us

PS: If you can grab a live CD of Ubuntu, you have a ready-to-use Linux PC without modifying anything in your machine.

[no1_slumko]

my bad, I forget about that for a while there. You're correct data transfer is the only way

[rasmus]

Yeah your PC is likely the infected one.  Spreading itself via external storage.

Anyone running windows i highly recommend 'Microsoft Security Essentials' - this is a free antivirus application, I've been using it for quite some time now and I will say that it works really really well - best app that MS has come out with in a long long time.

LINK: http://www.microsoft.com/Security_Essentials/ 

[sytheii]

Thank you guys for monitoring and posting on my thread, any help is greatly appreciated.

Its funny you mention ubuntu, i had already downloaded and then burned to a cd the latest version a couple of months back, i have it here, but ive never loaded it up to mess with it. 

As far as your comments I believe you all are on the right track. I am not particularly concerned about my phone anymore though, since the problem starts at the PC. 

Coincidentally and concurrently, an issue has manifested itself, almost literally after i first connected my phone back to my PC, so the problem definately originates there, and I am currently engadged in trying to repair my compute.

I am seeking help for that problem on this forum:

http://forums.techguy.org/malware-removal-hijackthis-logs/874842-google-links-being-hijacked-i.html#...

but so far, no one has responded.

[rasmus]

Install the Microsoft security essentials above - that'll solve all your PC issues.  Also you might consider using Google Chrome as your browser - its pretty much immune to all the exploits on websites that hijack your computer.