Results 1 to 6 of 6

Thread: AUTRUN.INF 'Panda Vaccine'

  1. #1
    Join Date
    Mar 2009
    Beans
    927
    Distro
    Ubuntu 12.04 Precise Pangolin

    AUTRUN.INF 'Panda Vaccine'

    What's going on? An 'AUTORUN.INF' file appeared on my flash drive. Gedit refuses to display the file, but the terminal gives me this:
    Code:
    $ cat AUTORUN.INF 
    caacaacaacaacaa
    A quick Google reveals something to do with a 'Panda' vaccine: here and here. My USB has only been plugged into three computers since it was last reformatted so I know that nobody put it on there knowingly, and I don't like the idea of robots sticking files on my flash drive. Anyone else had this happen to them?

    EDIT: I've deleted the file and don't need any help, I just wanted to see what people thought about this - it seems odd behavior for an antivirus.
    Last edited by Penguin Guy; May 15th, 2010 at 01:09 PM.

  2. #2
    Join Date
    May 2008
    Location
    Cluj, Romania
    Beans
    1,292

    Re: AUTRUN.INF 'Panda Vaccine'

    Well there you have it. You answered yourself in the links. Maybe on one of those computers there was a Panda Antivirus or something.
    How did you format the stick? Windows or Linux?

    Just format it in Linux and see if it is there afterwards:

    Unmount the drive:

    Code:
    sudo umount /dev/sdX
    Then format it:

    Code:
    sudo mkfs.vfat /dev/sdX
    Where the X is the corresponding letter (b,c etc) to your USB drive. You can see it by issuing the "dmesg" command after inserting the USB drive (sdb, sdc, sdd or whatever).

    MAKE ABSOLUTELY SURE you use the correct DEVICE NAME!
    The SATA HDDs have the same naming conventions (usually the first HDD is /dev/sda) so check carefully before proceeding!

  3. #3
    Join Date
    Jul 2009
    Beans
    380

    Re: AUTRUN.INF 'Panda Vaccine'

    Quote Originally Posted by Penguin Guy View Post
    Code:
    $ cat AUTORUN.INF 
    caacaacaacaacaa
    .. Anyone else had this happen to them?
    NO, obviously someone ran a DOS executable on your USB device ..

  4. #4
    Join Date
    Jan 2007
    Beans
    Hidden!
    Distro
    Ubuntu 12.10 Quantal Quetzal

    Re: AUTRUN.INF 'Panda Vaccine'

    Quote Originally Posted by Penguin Guy View Post
    What's going on? An 'AUTORUN.INF' file appeared on my flash drive. Gedit refuses to display the file, but the terminal gives me this:
    Code:
    $ cat AUTORUN.INF 
    caacaacaacaacaa
    A quick Google reveals something to do with a 'Panda' vaccine: here and here.
    Sounds more like a crow than a panda.
    Sometimes some tools format a USB as a CD, that makes it autorun (can be risky) and also prevents you from deleting anything. (because you can't delete files on a cd (except if it's cd-rw))

    format it would be the best option.
    In windows, you can use HP's floppy disk formatting tools to make sure it gets rid of the 'cd' ish type.
    In linux, I'd use what gradinaruvasile said, or gparted.

    and then if you want, plug it in a computer, one by one, and try to find out which computer did it. Panda usually shows in the add/remove programs from control panel in windows. It's not a bad antivirus though I'm surprised they mess up usb disks like that (if it really was panda).

  5. #5
    Join Date
    Mar 2009
    Beans
    927
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: AUTRUN.INF 'Panda Vaccine'

    Quote Originally Posted by Lightstar View Post
    I'm surprised Panda messes up usb disks like that (if it really was panda).
    My thoughts exactly - I had no trouble removing it, I just thought it seemed a bit odd that an antivirus would do this.
    Last edited by Penguin Guy; May 15th, 2010 at 01:10 PM.

  6. #6
    Join Date
    Oct 2007
    Location
    Zagreb, Croatia, Europe
    Beans
    513
    Distro
    Ubuntu 9.10 Karmic Koala

    Re: AUTRUN.INF 'Panda Vaccine'

    Quote Originally Posted by Penguin Guy View Post
    My thoughts exactly - I had no trouble removing it, I just thought it seemed a bit odd that an antivirus would do this.
    to prevent viruses creating infected autorun...

    usualy viruses spread over usb using some excecutable file and autorun which runs that exectuable...
    Dear god, I would like to file a bug report.

    increase Firefox startup speed and speed of Smart Location Bar:
    http://ubuntuforums.org/showthread.php?t=1088094

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •