USB write protection by malware

AirWolf

AirWolf

Honorary Master
Joined
Aug 18, 2006
Messages
24,890
Reaction score
1,696
Location
Port Shepstone, KZN, RSA, EARTH
Colleague has a flash drive with malware and write protection.

Regedit write-protect flag changed to 0, and disk part command used to remove readonly attribute.

Still can't format.

Other methods?

The malware changes all files to shortcuts on the drive.
 
They need the data on the drive?
 
I know this virus! all the original files are hidden on the flash if I recall correctly it gives a fake directory in the shortcut but if you change the directory to the original file location you'll be able to access the files again.

The virus will be present on the infected pc somewhere in task manager and also present somewhere in the flash drive
 
Use Rufus. If Rufus reports the access to the pendrive is blocked, it means your computer is infected too. In that case boot from external media like Hiren's Boot CD to do formating.

BTW, interesting comments on a fake directory shortcut, never seen it before.
 
sajunky said:
Use Rufus. If Rufus reports the access to the pendrive is blocked, it means your computer is infected too. In that case boot from external media like Hiren's Boot CD to do formating.

BTW, interesting comments on a fake directory shortcut, never seen it before.
Click to expand...
It's an internet café virus, I had so many drives infected by it during the windows XP Era
 
Spontaneous spinach said:
I know this virus! all the original files are hidden on the flash if I recall correctly it gives a fake directory in the shortcut but if you change the directory to the original file location you'll be able to access the files again.

The virus will be present on the infected pc somewhere in task manager and also present somewhere in the flash drive
Click to expand...
Yep, shortcuts point to windows/system32 folder.

Will try the suggestions above.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X