dideli_papai -screensaver? What is..FIXED/REMOVED!

[Former Member]

I do not know how I got this, but I first noticed it on my 1GB Flash Drive It's called "dideli_papai" I can delete it, but it comes back. I can format the flash drive, but it stays. It says it's a screen saver. So I checked my screen saver settings I saw something that said VGHD so I clicked on it, and clicked preview, nothing came up. It is now on my Magic Jack, and now I am afraid to insert my U3 Sandisk 2Gb with all my important files on it.

How can I remove this? I tried looking on google, but the pages were all in a different language other then English.... I had it translated my google, and it said it was some type of virus that infects flash drives. I scan with Malwarebyts' Anti-malware, and COMODO Firewall's defense+ but they both say it's fine. but it copies it's self to every flash drive, and I cannot delete it, it jsut comes back. I rename it, and a second one comes up.

Ive scanned my computer, and there are no virus's at all. So I am confused yet scarred.


UPDATE: So I just install bunch of AV's from download.com, and only tried 1 out, and has found 4 infections! It's called Trojan.Dropper/Gen

research.sunbelt-software.com/threatdisplay.aspx?name=Trojan-Dropper.Gen&threatid=175052
Which it says it's hostile, an downloads other types of trojans, spyware, etc.

So needing extra protection is very wise.

I'm thinking about putting Norton back onto my computer as that has helped keep me safe from stuff like this.

edit:

Well I think I found it. It was in the startup manager. I opened Glary Utilities, clicked on the start up manager. and found that it said "Services3" and from the Appdata Roaming folder. which I went through that in Ubuntu and deleted everything in that folder...


EDIT 2:

Yep it's completely GONE!!!! ;D

I have to thank SUPERAntiSpyware Free Edition from Download.com for this!! I had an option to scan all my drives, so I scanned my 2GB, 1Gb flash drive, MagicJack. DVD drive, C drive. and it found 4 virus's. 1 on the 1GB flash drive, 1 on the MajicJack, and 2 on my C Drive.

[Jackaroo]

o.o Now that's really odd.

[Former Member]

Yeah I know.. ive used my flash drive earlier today on the same computer, and it did not have that at all.

[Jackaroo]

Mar 23, 2009 23:15:20 GMT -8 @tidus90 said:

Yeah I know.. ive used my flash drive earlier today on the same computer, and it did not have that at all.

I know that some schools/colleges have programs which wipe USB things if there's a virus on it, along with .avi and .exe files, so move all your stuff onto a computer, all the stuff you want to keep, then take it into school/college and see if they have that program.

[MarvinRules]

Mar 23, 2009 23:09:48 GMT -8 @tidus90 said:

I do not know how I got this, but I first noticed it on my 1GB Flash Drive It's called "dideli_papai" I can delete it, but it comes back. I can format the flash drive, but it stays. It says it's a screen saver. So I checked my screen saver settings I saw something that said VGHD so I clicked on it, and clicked preview, nothing came up. It is now on my Magic Jack, and now I am afraid to insert my U3 Sandisk 2Gb with all my important files on it.

How can I remove this? I tried looking on google, but the pages were all in a different language other then English.... I had it translated my google, and it said it was some type of virus that infects flash drives. I scan with Malwarebyts' Anti-malware, and COMODO Firewall's defense+ but they both say it's fine. but it copies it's self to every flash drive, and I cannot delete it, it jsut comes back. I rename it, and a second one comes up.

Ive scanned my computer, and there are no virus's at all. So I am confused yet scarred.

That behavior seems like a worm or virus. The fact that a "Screen Saver" file returns on a flashdrive after a format, tells me that your computer has an infection of some kind. The fact that it appears on ALL of your flash drives is even more evidance that it is an infection.

As for removal... I have no idea, and can not find anything in English, (Or translated to English).
You could try posting on a site that specializes in spyware and adware removal help.

As a last resort, you could do a full format and re-install of your OS. Then delete all copies of this "Screen Saver" off of all flash drives, and external drives.

[Former Member]

Mar 23, 2009 23:19:34 GMT -8 MarvinRules said:

Mar 23, 2009 23:09:48 GMT -8 @tidus90 said:

I do not know how I got this, but I first noticed it on my 1GB Flash Drive It's called "dideli_papai" I can delete it, but it comes back. I can format the flash drive, but it stays. It says it's a screen saver. So I checked my screen saver settings I saw something that said VGHD so I clicked on it, and clicked preview, nothing came up. It is now on my Magic Jack, and now I am afraid to insert my U3 Sandisk 2Gb with all my important files on it.

How can I remove this? I tried looking on google, but the pages were all in a different language other then English.... I had it translated my google, and it said it was some type of virus that infects flash drives. I scan with Malwarebyts' Anti-malware, and COMODO Firewall's defense+ but they both say it's fine. but it copies it's self to every flash drive, and I cannot delete it, it jsut comes back. I rename it, and a second one comes up.

Ive scanned my computer, and there are no virus's at all. So I am confused yet scarred.

That behavior seems like a worm or virus. The fact that a "Screen Saver" file returns on a flashdrive after a format, tells me that your computer has an infection of some kind. The fact that it appears on ALL of your flash drives is even more evidance that it is an infection.

As for removal... I have no idea, and can not find anything in English, (Or translated to English).
You could try posting on a site that specializes in spyware and adware removal help.

As a last resort, you could do a full format and re-install of your OS. Then delete all copies of this "Screen Saver" off of all flash drives, and external drives.

Skype!? I have not used that in a very long time, I don't even have it installed on my computer anymore

Though I booted up into Ubuntu, and deleted it off of my flash drive, but for my MagicJack, I can't even access it. I am trying to get VMware to work on Ubuntu. (Got it partly but it wont recognize my .VMX file of WinXP.)

It has not copied it's self back onto the flash drive. So it is obviously gone. I'm going to look through the Vista drive in Ubuntu to check and see if I can find the worm.

[MarvinRules]

Mar 23, 2009 23:29:21 GMT -8 @tidus90 said:

Mar 23, 2009 23:19:34 GMT -8 MarvinRules said:

That behavior seems like a worm or virus. The fact that a "Screen Saver" file returns on a flashdrive after a format, tells me that your computer has an infection of some kind. The fact that it appears on ALL of your flash drives is even more evidance that it is an infection.

As for removal... I have no idea, and can not find anything in English, (Or translated to English).
You could try posting on a site that specializes in spyware and adware removal help.

As a last resort, you could do a full format and re-install of your OS. Then delete all copies of this "Screen Saver" off of all flash drives, and external drives.

Skype!? I have not used that in a very long time, I don't even have it installed on my computer anymore

Though I booted up into Ubuntu, and deleted it off of my flash drive, but for my MagicJack, I can't even access it. I am trying to get VMware to work on Ubuntu. (Got it partly but it wont recognize my .VMX file of WinXP.)

It has not copied it's self back onto the flash drive. So it is obviously gone. I'm going to look through the Vista drive in Ubuntu to check and see if I can find the worm.

Manually removing it from another OS is another good idea.

Have you booted back into Windows after removing it from the flashdrive via Linux? If not, than that is why it has not come back... If so and it has not come back, than the infection may not have noticed that you removed it.

Good luck and happy hunting!

[Former Member]

Mar 23, 2009 23:32:55 GMT -8 MarvinRules said:

Mar 23, 2009 23:29:21 GMT -8 @tidus90 said:

Skype!? I have not used that in a very long time, I don't even have it installed on my computer anymore

Though I booted up into Ubuntu, and deleted it off of my flash drive, but for my MagicJack, I can't even access it. I am trying to get VMware to work on Ubuntu. (Got it partly but it wont recognize my .VMX file of WinXP.)

It has not copied it's self back onto the flash drive. So it is obviously gone. I'm going to look through the Vista drive in Ubuntu to check and see if I can find the worm.

Manually removing it from another OS is another good idea.

Have you booted back into Windows after removing it from the flashdrive via Linux? If not, than that is why it has not come back... If so and it has not come back, than the infection may not have noticed that you removed it.

Good luck and happy hunting!

No not yet. I'm about to do that now.

[Former Member]

I forgot that I had SpyBot search and Destroy so I am scanning with that.

and yeah it came back onto the flash drive. Now I'm having problems booting in Ubuntu, it wants me to do a chkdsk /r and restart (Which I have not yet) and let it fix what ever problem it is having. But I hope SpyBot will find this infection, that these other's did not find.. >_>

[Ben Woodruff]

Sounds like you've been owned. The only way to ensure that you're clean is to backup anything really important (scan it from a secure computer [like one that has DeepFreeze on it] after doing so) and format your hard drives and flash drive.

[Sir Random]

ouch...viruses ya can't find, never fun. we had one on our home desktop and it would just shut down after a few minuets, it got bad enouhg that it fried out CPU...

[Former Member]

Mar 24, 2009 5:02:59 GMT -8 Sir Random said:

ouch...viruses ya can't find, never fun. we had one on our home desktop and it would just shut down after a few minuets, it got bad enouhg that it fried out CPU...

That's what happened to me 10 months ago, bad Trojan I ran into. call WinXP anti-spy 2007...