JunJun Notebook Computer Virus

Trojan type Computer Virus from Shanghai in China.

AV scanning picked up the following cocktail of hidden files on my flash (thumb) drive after I have inserted into the infected computer.

jun.exe - Virus identified Worm / Generic.EUP, Nuj.A.worm, Virus.Win32.AutoRun.dt
Windows.scr - Trojan horse PSW.OnlineGames.RXS
autorun.inf
RECYCLERUcHelp.exe - Trojan horse BackDoor.Agent.FVX

Autorun.inf

[autorun]
open = jun.exe
shellopencommand = jun.exe
shellexplorecommand = jun.exe

One way of remove these bad file is by formating the drive. Here is the alternate (longer) procedure as to how to remove these bad files from your usb drive.

If any of the above files are there, then probably the USB drive is infected. In command prompt type attrib -r -a -s -h *.* and press enter. This will remove the Read Only, Archive, System and hidden file attribute from all the files. Now just delete the files using the command del filename. example del jun.exe. Delete all the files that are suspicious. To be on a safer side, just scan the USB drive with an anti virus program to check whether it is free of virus or not. Now remove the drive and plug it again. In most of the cases, the real culprit turns out to be the Autorun.inf file which mostly gets executed when someone clicks Ok in the dialog window which appears above.

This virus will modify computer system information.

A new family of worms is spreadsing by copying itself on to removable drives such as USB memory sticks. These worms then automatically install themselves when a USB stick is next connected to a computer. With USB keys becoming so cheap they are increasingly being given away at trade shows. There is a big rise in financially motivated malware a USB stick couldbe an obvious backdoor into a company for criminals bent on targeting a specific business with their malicious code. The JunJun Notebook computer worm hunts for removable drives such as floppy disks and USB memory sticks, and then creates a hidden file called autorun.inf to ensure acopy of the worm is run the next time it is plugged into a Windows PC.

The best way these type of virus jumping into your computer is to disable the autorun facility of Windows. That way removabledevices such as USB keys and CD ROMs do not automatically launch when they areattached to a PC.

Updated On: 08.07.30