Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

My mother's Windows XP system recently got infected with the SHeur trojan (SHeur4.ese). I was able to download and install Malwarebytes Anti-Malware in line with the advice here, but the modem was bringing up odd errors and thereafter was unable to go online. This makes things extra tricky, as I was helping from overseas via Logmein, and Malwarebytes can't update itself.

Still, Malwarebytes claims to have removed the infection, but I suspect that the modem may also be infected, and will reinfect the PC when it is plugged back in.

How do we disable Windows XP autoplay or otherwise prevent infection when she plugs it in, so that she can scan it?

Any other advice would also be welcome.

share|improve this question

1 Answer 1

up vote 1 down vote accepted

Microsoft has instructions here on how to disable autoplay: http://support.microsoft.com/kb/967715

There are manual ways and then there are patches you can download from the site to do it automatically.

The modem may show up as a USB memory stick and be given a drive letter. Scan that drive letter using MBAM and your local antivirus software.

share|improve this answer
    
Thanks. I won't be able to download those patches, of course, but it looks like it will be possible by manually editing the registry. I'll have to talk my mother through it over the phone. In your opinion, will disabling autoplay make it safe to plug in the USB modem if it's infection? –  francois Oct 21 '11 at 21:19
    
Well, manually editing the registry had the desired result. This article also helped me (shorter than the MS one): superuser.com/questions/37569/… (Having less luck clearing the infection though.) –  francois Oct 22 '11 at 20:49

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.