Everytime I plug my Toshiba Canvio Portable Drive 3.0 1tb into my computer and run a virus scan i get SecurityRisk.OrphanInf has been Quarantined and when i unplug my drive and plug it in the icon is gone because norton delets the autorun file which I have to restore is this a virus or is norton just picking up a false positive? I did a regualr scan on the autorun file itself it doesnt pick up as a virus it says its clean I also did a scan on just my portable hardrive it says its clean but when do a full system scan with the drive plugged in i get SecurityRisk.OrphanInf has been Quarantined and when i go to my drive and click hidden files the autorun file which is needed for the toshiba icon is again deleted so iam just curious as to wether it is a virus or not?
Hi, willkommen im Forum,
das kannst du hier überprüfen:
https://www.virustotal.com/de/
einfach die .exe hochladen und scannen.
grüsse
Hi xflash27,
This may or may not be malware. Please see the second post in this thread and this article for more details. There is also a thread from these forums about the same. - http://community.norton.com/t5/Norton-Internet-Security-Norton/securityrisk-orphaninf/td-p/450528.
I hope this helps.
Dave.
Based on the information contained in the links provided by Krusty13 above, this isn't a virus. It's fairly simple to reproduce the 'SecurityRisk.OrphanInf' detection by manually creating an autorun.inf file that contains an invalid file reference.
For example, if you create an autorun.inf file that contains the following text:
[autorun]
open=abc.exe
and copy it into the root directory of a USB drive, then a Quick Scan will detect this file as 'SecurityRisk.OrphanInf':
Category: Quarantine
Date & Time,Risk,Activity,Status,Recommended Action
2012-04-07 8:48:43,Medium,SecurityRisk.OrphanInf detected by Virus scanner,Quarantined,Resolved - No Action Required
Resolved Threats:
SecurityRisk.OrphanInf
Type: Anomaly Risk: Medium (Medium Stealth, Medium Removal, Medium Performance, Medium Privacy)
Categories: Security Risk
Status: Fully Resolved
-----------
1 File
k:\autorun.inf - Deleted
The reason for the detection is because the file 'abc.exe' referenced by autorun.inf does not exist.
If you would like to resolve this issue so that the Norton does not detect this file as a threat, then you will need to remove the invalid file reference from the autorun.inf file. It's just a text file so you can modify it directly using Notepad. If you would like assistance with this, then please copy and paste the contents of your autorun.inf file into your next post.
Thanks
Everytime I plug my Toshiba Canvio Portable Drive 3.0 1tb into my computer and run a virus scan i get SecurityRisk.OrphanInf has been Quarantined and when i unplug my drive and plug it in the icon is gone because norton delets the autorun file which I have to restore is this a virus or is norton just picking up a false positive? I did a regualr scan on the autorun file itself it doesnt pick up as a virus it says its clean I also did a scan on just my portable hardrive it says its clean but when do a full system scan with the drive plugged in i get SecurityRisk.OrphanInf has been Quarantined and when i go to my drive and click hidden files the autorun file which is needed for the toshiba icon is again deleted so iam just curious as to wether it is a virus or not?