xk2n.bat appears in my USB Memory!

Discussion in 'NOD32 version 2 Forum' started by thE_54Int, Sep 21, 2008.

Thread Status:
Not open for further replies.
  1. thE_54Int

    thE_54Int Registered Member

    Joined:
    Sep 21, 2008
    Posts:
    2
    :blink: I've been scanning my USB Memory with NOD but it doesn't detect any problem, but every time I insert it to my lap, the autorun message display "Execute xk2n.bat Unspecified Provider", how can I rip it off?
    Maybe I'm not scanning in the right way.o_O
     
  2. Kosak

    Kosak Registered Member

    Joined:
    Jul 25, 2007
    Posts:
    711
    Location:
    Slovakia
    Hello,

    disable Autorun function in Windows and format your USB flash memory.

    Regards
     
  3. thE_54Int

    thE_54Int Registered Member

    Joined:
    Sep 21, 2008
    Posts:
    2
    I really appreciate your answer kosak, i'm gonna try it and let me see how does it work

    =)
     
  4. huyvu

    huyvu Registered Member

    Joined:
    Sep 22, 2008
    Posts:
    1
    I have a same problem, but in this case all of my HDD have it. Whenever I delete it, it reappear again. It even auto-copy itself to any USB memory, flash memory or external HDD I connect to my PC. And last but not not least, it cannot be regconize by any of my anti-virus programs and even prevent them update. I really don't want to format everything like Kosak suggest. Anyone can help me?
     
  5. Kosak

    Kosak Registered Member

    Joined:
    Jul 25, 2007
    Posts:
    711
    Location:
    Slovakia
    Hello, you have to only format flash media, because there will be files causes automatic installation of malware, not HDD. When you disable Autostart, you interrupt attempt to install malware from CDs, flash medias,...
     
  6. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,032
    Location:
    California
    Hello,

    It sounds like you may have an undetected piece of malware resident on your system.

    Download a copy of ESET SysInspector, save a log file, and email it to support@eset.sk along with one of the AUTORUN.INF files any any program files listed in it inside a .ZIP or .RAR archive file protected with a password of infected with a link to this message thread for assistance from ESET's support engineers.

    Regards,

    Aryeh Goretsky


     
  7. WENDITICITA

    WENDITICITA Registered Member

    Joined:
    Oct 11, 2008
    Posts:
    1
Thread Status:
Not open for further replies.