USB Virus

Solidus

Expert Member
Joined
Jun 2, 2008
Messages
1,152
Reaction score
0
Location
Cape Town
I have some crappy virus on my USB Flash Drive

AVG aint picking it up, the virus leaves 2 folders Autorun_Fichiers and MisVh55 <- This one being hidden.

Anyone have any experience with this virus?
 
Sounds like that stupid autorun...erm..trojan if I can call it dad,promiscuous as hell but mostly irritating. Remove the startup apps from msconfig if it's added any. Delete the autorun.inf files. Reboot
 
Try to gain complete control over all usb autorun.inf files and hidden ones.SOmetimes you delete it and next time its back again.
Put sytem restore of and do all this via safe mode by.
 
Try to gain complete control over all usb autorun.inf files and hidden ones.SOmetimes you delete it and next time its back again.
Put sytem restore of and do all this via safe mode by.

start -> run -> cmd

d:\ ( e:\ ) <- the usb drive

attrib -h -r -s

edit autorun.inf

Remove everything in there

save the file

attrib +r +s +h autorun.inf

Byebye Irritance
 
i think i had that as well ....i formated the flash drive...i just made a back up on my desk top at work which has mcafee which removed the viruses from the desktop....then copied them back into the flash again...
 
Already on Linux, got the virus from a friend's pc and my bro still uses the windows partition that's how I came to know about it.

Thanks for the help will give it a jab now

Er... In that case, plug flash into Linux box, delete affected files, clean affected pc, problem solved.
 
So I got rid of this virus but all of a sudden I can't windows key run on my system and I don't have a folder options in my tools menu :confused:
 
I've found it also messes up your usb ports. Like the 3G modem is no longer detected. Anyway to fix it without re-installing?
 
Only on local at the moment :(

Code:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoFolderOptions"=dword:0000000

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions]
"NoBrowserOptions"=dword:00000000

Dump in text file. Rename to .reg extension
 
Top
Sign up to the MyBroadband newsletter
X