iPod and autorun.inf trojan

Question

Level 1

0 points

iPod and autorun.inf trojan

Hi!

Ive been infected with a Flash drive. Now my iPod is infected with an autorun associated with a trojan.
To treat my others USB devices, I've used successfully Flash_Disinfector.exe. That program remove the autorun.inf file and installs some lures (.txt files read-only).

*Can I use this kind of fix?*
*Can I format my ipod?*

thanks +

Dell, Windows XP

Posted on Mar 26, 2009 4:25 PM

Reply

Answer 1

deggie

Level 10

167,183 points

Mar 27, 2009 3:09 PM in response to Romatesla

Since that is a Windows virus how do you know your iPod is infected?

If you are concerned and you manually placed the item on your iPod (assuming you have enabled disk use on your iPod otherwise it won't be there) just Restore it in iTunes.

Reply

Answer 2

Romatesla Author

Level 1

0 points

Mar 28, 2009 8:36 AM in response to deggie

Well, it's a virus infecting only USB devices.
http://en.kioskea.net/forum/affich-63526-how-to-remove-autorun-inf-virus-open-hi dden
It installs an autoplay file on your USB pen (autorun.inf in my case).
I've used successfully an antivirus deleting this file and installing another one (a lure) but I don't if I can do that on my ipod.

Can I format "manually" my ipod if it's inefficient (without usying the classical key combination Menu+Selection)?

Thanks++

Reply

Answer 3

deggie

Level 10

167,183 points

Mar 28, 2009 11:57 AM in response to Romatesla

It affects USB storage devices, if you have NOT enable disk use on your iPod it does not affect it and cannot be on it (it couldn't run on it anyway). If you have enabled disk use in your settings then Restoring the iPod will remove all data from it, you do not need to reformat it.

To check to see if you have enabled disk use connect your iPod, go to the Summary tab on the right of iTunes and see if the "Enable Disk Use" box is ticked. If you did not specifically do this in setting up your iPod it will not be ticked and you don't have this virus on your iPod.

Reply

Answer 4

Romatesla Author

Level 1

0 points

Mar 28, 2009 3:20 PM in response to deggie

I've tried to open my ipod to test and Avast have found a Worm: Win32:Confi...

You are right, in iTunes "Enable Disk Use" box is ticked but it's now gray, I cannot "untick" it. Should I restore another time?

Reply

Answer 5

deggie

Level 10

167,183 points

Mar 28, 2009 4:26 PM in response to Romatesla

You probably have also enabled "Manually manage your music", which is why that is greyed out. Have you Restored you iPod (which removes all data from the device)?

Reply

Answer 6

Romatesla Author

Level 1

0 points

Mar 29, 2009 4:05 AM in response to deggie

Yes, I've restored it once, then I've placed again my songs and then I've opened this discussion.....

May be restoring it once again, disabling "Manually manage your music" and "using as a disk"?

Reply

Answer 7

deggie

Level 10

167,183 points

Mar 29, 2009 8:25 AM in response to Romatesla

That would be worth a try. If you are manually adding songs to it that is where you are picking up the autorun.inf...or you are getting a false positive when you are scanning it.

Reply