how to find which process is the virus that creates autorun and an exe file in drives

Question

0.00/5 (No votes)

See more:

Hi,

I sometimes encounter some viruses that create its files as autorun.inf and an exe file in drives I am able to find them and clear them but a virus process will create them again.
Can I develop a C# code to find the virus process and delete the file (that is certainly locked)?

Thanks in advance.

Posted 15-Nov-11 8:02am

bbloopp

Updated 15-Nov-11 9:07am

André Kraak

v2

Add a Solution

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

OriginalGriff · Answer 1 · 2011-11-15T09:06:00

You would be better off using a commercial virus scanner, rather than relying on a simple C# program - there are so many ways that a malicious program could potentially perform such operations, that it would be very, very difficult to detect the culprit (or infected programs if it is indeed a true virus).

They don't have to cost money - Microsoft Security Essentials is free and seems to work fine.

mragers · Answer 2 · 2011-11-15T17:59:00

"process monitor" do something like this you can download it for free from this link (http://technet.microsoft.com/en-us/sysinternals/bb896645)
also with unlocker (http://download.cnet.com/Unlocker/3000-2248_4-10493998.html) you can delete the file but I don't know the c# code. it would be great if someone knows about c# code.

how to find which process is the virus that creates autorun and an exe file in drives

2 solutions

Solution 1

Solution 2

Add your solution here

Preview 0