Solved backdoor win32 cycbot.b

[FCUSA]

Will do - thanks so much for your time.

 

[Jacee]

I copied this from quietMan7 ....

Alternatively, you can download and use Panda USB Vaccine.
alternate download link 1
alternate download link 2

• Double-click on USBVaccineSetup.exe to install the program to C:\Program Files\Panda USB Vaccine.
• Read and accept the license agreement, then click Next.
• When setup completes, make sure "Launch Panda USB Vaccine" is checked and click Finish to open the program.
• Click the Vaccinate computer button. It should now show a green checkmark and confirm Computer vaccinated.
• Hold down the Shift key and insert your USB flash drive.
• When the name of the drive appears in the dialog box, click the button to Vaccinate USB drive(s).
• Exit the program when done

Note: Computer Vaccination will prevent any AutoRun file from running, regardless of whether the removable device is infected or not. USB Vaccination disables the autorun file so it cannot be read, modified or replaced and creates an AUTORUN_.INF as protection against malicious code. The Panda Resarch Blog advises that once USB drives have been vaccinated, they cannot be reversed except with a format. If you do this, be sure to back up your data files first or they will be lost during the formatting process.

 

[FCUSA]

Flash Drive is good - both MBam and McAfee

I will proceed with the backdrive (hopefully all will be fine) - it was the Flash drive I actually used to pull a file from the computer way back when.

Well, I was beginning to get concerned that the trouble in downloading and running Flash Disinfector was either (operator error) or something far more serious like a symptom of the infection. Can I rule that out since you experienced the same?

 

[Jacee]

Read my post above yours.

 

[FCUSA]

I have?

 

[Jacee]

About using Panda USB Vaccine ?

 

[FCUSA]

Yes. Am I supposed to do this for the backup drive also? I feel I need to go to their blog to understand it better - caught me by surprise.

 

[Jacee]

Well, this was the first time I used Flash Disinfector by sUbs, so it confused me not to see the autorun.ini folder .... but! autorun is disabled, which is good. You don't want a file that is/was on a CD, DVD, or USB device to just open up and run willy-nilly

 

[FCUSA]

Please, do not think I am questioning the process - I just truly don't understand it. And when I see print in Bright Red or Warning Signs - it makes me 'concerned'. Are you saying the Flash Disinfector worked as you expected i.e. you found the hidden file you were looking for? How would I know if the file was implanted on my drive? (if possible)

EDIT: I guess the better question is how did you (or would I) know it is disabled?

Thank you again for your patience!

 

[Jacee]

EDIT: I guess the better question is how did you (or would I) know it is disabled?

Because when you insert the USB device, nothing will actively run.

You should be quite safe :D