Flashdrive Virus!

B

brixtonave

New Member
I plugged my usb in an internet cafe and when i used it in my laptop, there's a shortcut that leads to my flashdrive.

Whenever I plug my usb stick in, the anti virus software blocks the autorun.inf (it didn't use to do that before) then when I open the flash drive, there is a shortcut named "Removable Disk 4GB". If you double click it, my files are there. then once you go back to the main flash drive, more shortcuts pop out. like thumbs.db or autorun.inf.

I tried several ways. I used autorun eater, panda, disinfector.. but it still keeps coming back. The virus will be deleted but when i plug it back in, there they are again!

I also tried to reformat my usb to NTFS format instead of FAT32 and the virus "disappeared". If i format it to fat32 again, it will appear again.

Please help. A couple of usb drives filled with children's lesson plans are on the line. Thank you.
 
Scan it with MalwareBytes Anti-Malware.

Oh and if you already formatted it, your files are gone.
 
voyagerfan99 said:
Scan it with MalwareBytes Anti-Malware.

Oh and if you already formatted it, your files are gone.
Click to expand...

Its okay, figuring out the solution to this problem is much more important. Ive already installed and scanned using malware bytes. It says no detection was found. But the shortcuts are still there.
 
Changed my anti virus

Scanned my hard drives

No malware or virus found

Scanned my usb

No malware or virus found

But the shortcuts are still there.

What could I do?
 
These kind of viruses cannot be deleted manually inside Windows because they are made on the way that they use current OS (which is currently active/in use together with virus's other needed data) and tell to that OS to recreate their data immediately when it's deleted manually by user (you).

So even if antivirus finds it and deletes it,it will be automatically immediately recreated by the current OS (using of course virus's other data on other HDD locations) on which it executes.

Usually these kind of viruses are made in BATCH code using following file extension formats:

-.inf
-.bat
-.txt
-.cmd
-.vbs

There are few ways of deleting this kind of virus:

1. Make sure your infected USB stick is plugged in and detected by OS.After that perform a FULL virus scan.

NOTE 1: During the virus scan,VIRUS ACCESS PROTECTION must be turned on ALL the time in order to prevent automatic immediate virus data recreation.of course not all antivirus programs are good at this and not all of them have this option.McAfee Virus Scan Console has it and it's great at doing so.

NOTE 2: Be sure you do all this in SAFE MODE WITH COMMAND PROMPT.

2. If you know where each of the virus's files (all it's data) is located on the hard disk drive AND on your USB stick,load Linux Ubuntu operating system from the CD-ROM disk and delete all of those files manually.In Linux operating systems these kind of viruses do NOT work and by deleting their data (files) will not result in their recreation.

3. Find the key file of that virus (usually called "autorun.inf" but not always) which is the one who is doing immediate virus's data (files) recreation,open it and completely change the text code (which was used for virus's data immediate recreation) into something else or simply delete the entire code text.After that save that file.

NOTE: You must do this with some external OS loaded from the CD/DVD-ROM disk such as Linux Ubuntu because if you do it inside Windows OS (which virus currently uses),it will not make any changes since the file is in use the whole time and it is automatically recreated under currently-in-use Windows OS.






Cheers everyone!

By the way...for those who still do not know...BLACK MESA SOURCE GAME IS OUT!!!!!!!!!!!!!!!!!!!!!!!!!!!THE BEST GAME OF ALL TIMES!!!
 
You can download flash disinfector and run it with your usb flash drive attached to the system. It will create an autorun file that will stop any infections from getting on it.

  • Please download Flash_Disinfector.exe by sUBs and save it to your desktop.
  • Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
    Note: Some security programs will flag Flash_Disinfector as being some sort of malware, you can safely ignore these warnings
  • The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well.
  • Wait until it has finished scanning and then exit the program.
  • Reboot your computer when done.
Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don't delete this folder. It will help protect your drives from future infection.
 
voyagerfan99 said:
Black Mesa has been out since over the summer S.T.A.R.S. :P
Click to expand...

I know lol.I just did not have time to start playing it when it came out last year.I had too much work to do on my UAC software.
I just started playing it last week and it's SOOOOOO DAMN GREAT AND PERFECT!It is a perfect remake of Half-Life 1.Every room is the same,but the way they remaked all is so damn perfect that even by knowing the area from Half-Life 1,I got lost of how good they remaked all :D
I play it on HARD and soldiers are so damn hard to defeat.I just look at them and I am already dead hahaha WTF hahaha!!!
I was like:"Where the hell did my 100% health level gone already?!Am I dead?! THIS SUCKS!!!"
HAHAHA xD xD xD :D :D :D
Aliens are hard to defeat also,but that's good because it's more like real life then.
voyagerfan99...between me and you...I usually run away when I see soldiers or aliens without trying to kill them because I know I will be killed instead lol :D
So I say: RUN OR BE KILLED! :D

Nah I am just kidding I am not running away,but I do think about that a lot when killing them hahaha!
And the MUSIC IS AWESOME.IT PERFECTLY DESCRIBES THE AREA AND THE SITUATION AND THE MOOD IN WHICH YOU ARE CURRENTLY IN!

I am currently at QUESTIONABLE ETHICS part of the game.
Can't wait to get to the LAMBDA COMPLEX part.Too bad XEN borderworld is not included.I guess we will have to wait until they finish that too.
 
Last edited:
I installed the flash disinfector and a window just pops up asking if i will allow the program to make changes in the computer. I click yes but nothing happened. I tried this several times but still no utility asking me to insert my usb.

Please please help me get rid of this virus :(

johnb35 said:
You can download flash disinfector and run it with your usb flash drive attached to the system. It will create an autorun file that will stop any infections from getting on it.

  • Please download Flash_Disinfector.exe by sUBs and save it to your desktop.
  • Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
    Note: Some security programs will flag Flash_Disinfector as being some sort of malware, you can safely ignore these warnings
  • The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well.
  • Wait until it has finished scanning and then exit the program.
  • Reboot your computer when done.
Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don't delete this folder. It will help protect your drives from future infection.
Click to expand...
 
You are supposed to have it plugged in before running the program. Please read the instructions carefully.
 
Unlocker

Install unlocker and then insert removable disk. Right-Click unlock / kill all process attached to your pen drive, then you should be able to format it normally.

Good luck!
 
You must log in or register to reply here.
Back
Top