Trojan.Horse.PSW.Agent.YOM on new MP3 what to do?

[aimie077]

Dear all,

I got a new mp3 yesterday, as soon as I've connected the USB two things happened: the player and a false "CD rom" called AMT_CDROM appeared.

AVG 8 immediately alarmed me that it's Trojan.Horse.PSW.Agent.YOM, but cannot remove it or heal it, of course. (It says start.exe infected on this false CD rom)
In the 1st 10 minutes i could send a few songs onto the mp3 player, but after a while the Windows says (i am trying to translate from Hungarian correctly) error during the file's or folder's copying: it cannot be created.

AMT_CDROM contains these stuff: AMT.sn , autorun.inf , start.exe - you see, it's runing automatically as enters the system and protected, only read format)

So far I've tried a Panda vaccine, did not solve the problem, then I've turned off autorun in sys, so that it does not appear right after pluging it in, but still dear in my computer.

I still can't send eg files onto the player. I don't know what this trojan is doing on my computer or if it is on it even when the player is not plugged in.

Please help me

[Shen]

Hey!
Its because your computer is infected by USB virus which had spread through the internet and targets the USB drives. Whenever you plug a USB storage device this will appear. Download USB Disk Security here. Trial version is available for download. You need to buy it so that your system is protected... All the best!

[SecRecy]

See this similar thread for more help : Win32/Agent.ONB Trojan virus built into an mp3 player rom

[Aleksandra]

Try to use Panda USB Vaccine. The free Panda USB Vaccine allows users to vaccinate their PCs in order to disable AutoRun completely so that no program from any USB/CD/DVD drive (regardless of whether they have been previously vaccinated or not) can auto-execute. This is a really helpful feature as there is no user friendly and easy way of completely disabling AutoRun on a Windows PC.

To run Panda USB Vaccine automatically at boot time:

USBVaccine.exe [ A|B|C…|Z ] [ +system|-system ] [ /resident [/hidetray] ]

[drive unit]: Vaccinate drive unit
+system : Computer vaccination
-system : Remove computer vaccination
/resident: Start program hidden and prompt for vaccinating every new drive
/hidetray: Hides tray icon when used with the /resident command

[BugMagnet]

Hey!
Its because your computer is infected by USB virus which had spread through the internet and targets the USB drives. Whenever you plug a USB storage device this will appear. Download USB Disk Security here. Trial version is available for download. You need to buy it so that your system is protected... All the best!

No, the aimie077's computer is NOT infected, at least not by this gadget. This mini-mp3 player was designed by the Chinese manufacturer to be an infector. It exploits yet another stupid microsoft design defect (USB autorun by default). aimie077's antivirus stopped 'start.exe' (the trojan installer) from running.