Problem with desktop.ini files

[arunbalait]

Hi all

In my office systems a file named desktop.ini stored in each and every folders of my system. Am using XP.
And also that file has names like DESKTOP.INI, _destop.ini

I found that its a type of virus. That file is stored or copied in the Administrative tools too.. I have tried lots of antivirus softwares. But nothing cleared it..

And that virus includes a IFRAME code for some sites into my asp, php etc files.

It also affects my programs in ASP, PHP etc...

I think the virus name is VBS.Redlof.A

plz tell me a solution to clear those files.

by searching the computer also resulted failure...

Plz tell me a anti virus software that clears it.

Help me plz

thanx

[dafodil]

Hi all

In my office systems a file named desktop.ini stored in each and every folders of my system. Am using XP.
And also that file has names like DESKTOP.INI, _destop.ini

I found that its a type of virus. That file is stored or copied in the Administrative tools too.. I have tried lots of antivirus softwares. But nothing cleared it..

And that virus includes a IFRAME code for some sites into my asp, php etc files.

It also affects my programs in ASP, PHP etc...

I think the virus name is VBS.Redlof.A

plz tell me a solution to clear those files.

by searching the computer also resulted failure...

Plz tell me a anti virus software that clears it.

Help me plz

thanx

Please try avg a free antivirus.....

just type avg in google to download...

Tell me what happens...
thanks....

[arunbalait]

Please try avg a free antivirus.....
Tell me what happens...
thanks....

Ya i have tried that too..

Upto AVG7.5

Then once I used AVG that cleared those files.,. But I forgot that version name. So i tried lots of AVG versions after that. But no changes.

Thanx for your reply.

[dafodil]

I've searched the virus and it can be easily removed by norton....

Noticed that it only affects windows operating system....

Made of vb script....

Check this out:

http://www.symantec.co m/

[arunbalait]

I've searched the virus and it can be easily removed by norton....

Noticed that it only affects windows operating system....

Made of vb script....

Check this out:

http://www.symantec.co m/

Am using symantec 10.1 now. But not detecting.

Now using that anti virus only.

I already found the info abut that virus in that site.
Thanx.

[dafodil]

Am using symantec 10.1 now. But not detecting.

Now using that anti virus only.

I already found the info abut that virus in that site.
Thanx.

How about trying to download Norton Antivirus 2007, try the trial version

try this link:

http://www.symantec.com/home_homeoffice/downloads/index.jsp

[bartonc]

Am using symantec 10.1 now. But not detecting.

Now using that anti virus only.

I already found the info abut that virus in that site.
Thanx.

Here is the reason that AV won't detect those files:

If you have configured your folders options to 'remember each folder's view
settings' then you will get a desktop.ini file on every folder. This is not
a virus - this is just the settings container for that folder.

[arunbalait]

How about trying to download Norton Antivirus 2007, try the trial version

try this link:

http://www.symantec.com/home_homeoff...oads/index.jsp

Ya watever the version for symantec it doesnt works. I think it needs some patches. But tried few patches. Dont know exact patch.

I tried this version too as a trial version. But no change so I again came back to symantec 10.1

[arunbalait]

Here is the reason that AV won't detect those files:

If you have configured your folders options to 'remember each folder's view
settings' then you will get a desktop.ini file on every folder. This is not
a virus - this is just the settings container for that folder.

Ya You are right. Thats windows OS file. But with that same name the virus file copies into my system..

Goto symantec.com and search for desktop.ini. It gives the details about that virus

[bartonc]

Ya You are right. Thats windows OS file. But with that same name the virus file copies into my system..

Goto symantec.com and search for desktop.ini. It gives the details about that virus

Apples and oranges, my fiend. If you have that setting turned on, and AV won't detect them, then you don't have the virus.

[bartonc]

Apples and oranges, my fiend. If you have that setting turned on, and AV won't detect them, then you don't have the virus.

What's more, all the info that I have dug up is dated 2003 & 2005.

[arunbalait]

What's more, all the info that I have dug up is dated 2003 & 2005.

Ya fine... But that file entered into my system through a CD. I scanned that CD too..

If its not a virus am happy only. Am in doubt that, that file getting copied in all folders, administrative tools etc., But in some folders that file does not exists.

Give me some idea if am wrong.

Thanx for your informations

[dafodil]

Ya fine... But that file entered into my system through a CD. I scanned that CD too..

If its not a virus am happy only. Am in doubt that, that file getting copied in all folders, administrative tools etc., But in some folders that file does not exists.

Give me some idea if am wrong.

Thanx for your informations

Is there no other way? How about using the system restore...

[bartonc]

Ya fine... But that file entered into my system through a CD. I scanned that CD too..

If its not a virus am happy only. Am in doubt that, that file getting copied in all folders, administrative tools etc., But in some folders that file does not exists.

Give me some idea if am wrong.

Thanx for your informations

A legitimate desktop.ini file can be opened with notepad.
In there you should see only text. For example:
[DeleteOnCopy]
Owner=Barton whoever
Personalized=5
PersonalizedNam e=My Documents

[arunbalait]

A legitimate desktop.ini file can be opened with notepad.
In there you should see only text. For example:
[DeleteOnCopy]
Owner=Barton whoever
Personalized=5
PersonalizedNam e=My Documents

The files those are visible are opening nad that file contains contents like what you mentioned.. But some files are not visible. But while copying a folder to another location I can able to see that file being copied in the copy progress window.

And that file too scanned by AV but they not indicate them as virus.