I discovered a file, named autorun.ini on my USB flash drive:
;jpId UagEbddsb PCjo
oPEn = efhcnu.exe
;utvDpsMqpT dDustbemW XyAy WeywFbvaVA eQnK
sHeLL\open\COmmanD = efhcnu.exe
ShEll\expLore\coMmANd = efhcnu.exe
;kdtrelceNy uEeF gFTf
shEll\autoPLAy\commAND = efhcnu.exe
Both it and the accompanying efhcnu.exe are hidden under windows and are visible only after "Show system files" is enabled.
efhcnu.exe has size 168kB.
My priorities are:
- identify which computers were infected and what is the damage
- remove the malware
- report this incident to the public
How should I proceed?