Results 1 to 8 of 8

Thread: Virus Detected in AutoRun.exe of bhuj-ahmedabad_a.zip

  1. #1

    Question Virus Detected in AutoRun.exe of bhuj-ahmedabad_a.zip

    Dear Friends!

    My Anti Virus Software Has detected "Worm.Win32.AutoRun.fnc" while downloading Route:bhuj-ahmedabad_a.zip.
    My Concern is will this virus/worm affect PC?

    Is there any other download file which is safe?

    Any more links to download Indian Routes for other state cities?

    Please reply.

    Thanks and Regards
    Asif

  2. #2
    Join Date
    Nov 1999
    Location
    Bridgeview, Illinois
    Posts
    5,228

    Default

    Which file library did you get this file from?

    http://www.nictasoft.com/viruslib/ma...32.AutoRun.fnc
    [SIGPIC][/SIGPIC]
    [URL="https://www.facebook.com/ken.plaza.9"]My Facebook Page
    [/URL][URL="http://jeffreywimberly.proboards.com/"]Rails of the World Forum
    [/URL][URL="http://frankoburns.proboards.com/"]Mophouse-MLTDownloads Froum[/URL]

  3. #3
    Join Date
    May 2010
    Location
    Worksop, UK
    Posts
    2,668

    Default

    Hi Asif,
    That file was uploaded in May 2012, and downloaded 1182 times, so it's strange that it's not been reported before.

    Microsoft Security Essentials (it's right up to date!) has reported three occurrences of this virus, and indicated that it had dealt with them! It may be a "false positives", but it's interesting to find out if users of other AV software have the same report.

    Cheers,
    Ged

    EDIT : bnsf1959 : I've just downloaded the file from the library on this site.
    The following files are reported to have the virus :
    bhuj-ahmedabad\Bhuj ADI\SHAPES\WA_Rp1\WA_Rp1.exe
    bhuj-ahmedabad\Bhuj ADI\SHAPES\WA_Rp81\WA_Rp81.exe
    (after unpacking)
    Last edited by slipperman; 12-16-2013 at 10:10 AM.

  4. #4
    Join Date
    Nov 1999
    Location
    Bridgeview, Illinois
    Posts
    5,228

    Default

    Email sent to Nels.
    [SIGPIC][/SIGPIC]
    [URL="https://www.facebook.com/ken.plaza.9"]My Facebook Page
    [/URL][URL="http://jeffreywimberly.proboards.com/"]Rails of the World Forum
    [/URL][URL="http://frankoburns.proboards.com/"]Mophouse-MLTDownloads Froum[/URL]

  5. #5
    Join Date
    Mar 2001
    Location
    TrainSim.Com World HQ
    Posts
    941

    Default

    Just to be safe I have deleted the file.

  6. #6
    Join Date
    May 2010
    Location
    Worksop, UK
    Posts
    2,668

    Default

    Hi Nels & bnsf1959,
    Many thanks, Gentlemen!

    I suggest you, Asif, do likewise and delete the file, permanently! Hopefully, the author will upload a version without this problem.

    Cheers,
    Ged

  7. #7
    Join Date
    Nov 1999
    Location
    Chippenham, Wiltshire, UK.
    Posts
    6,999

    Default

    This is one of 5 files that make the route. I have just run it through AVG which detected no threats. In fact I unzipped all 5 files back in 2012 with no threats detected.

    Just checked the two exe files with AVG in the unzipped state and get a different threat now, where there was none back in 2012. The detected threat is Luhe.Fiha.A
    Last edited by baldwin; 12-16-2013 at 03:27 PM.
    Beer is not a matter of life or death, it is much more serious than that.

  8. #8

    Default

    Dear Friends,

    I thank you all for your kind reply to my post!

    Take Care!

    Regards
    Asif

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •