34 replies to this topic

[blood618^_^]

Here's a Tip on USB Devices on protecting them.. Hope you want this... Enjoy

1. Check first the Auto Insert Notification setttings. Set it to "prompt user...".
2. Insert your USB device
3. Open "My Computer" after the USB loads
4. DON'T left-click, but right-click on the USB drive
5. Check: (very important)

if it displays:

Quote

Open
Explore
Search
Autoplay

then it's safe.

if it displays:

Quote

Autoplay
Open
Explore
Search

or:

Quote

Auto
Autoplay
Open
Explore
Search

or:

Quote

0pen
Autoplay
Open
Explore
Search

or:

Quote

Open
Autoplay <-- Note that Autoplay comes after Open
Explore
Search

then your USB device is infected.

To remove it (without having to reformat your USB device):
- Of course, scan and clean it with an anti-virus software.

But to do it manually:
1. Go to Tools>Folder Options. If Folder Options isn't displayed, then proceed to step 7**
2. Go to the View tab, then enable "Show hidden files and folders", and uncheck "Hide extensions for known file types" and "Hide protected operating files" (click yes on this part)
3. Apply and Ok
4. Click the address bar
5. Type the drive letter of your USB device (example - F:\)
6. Look for suspicious files... like EXE files that has the icon of a folder, and named after the folder it is in... or VBS files in the root folder... or krag.exe and other unnecessary executables, or the folder RECYCLER. Delete those.
7. Run Notepad
8. Go to File>Save As, go to any folder you want to save.
9. Name it as "autorun.inf", then save.
10. Copy autorun.inf
11. Paste it on the root folder of the USB drive (example - F:\)
12.Confirm file overwrite.
13. Reconnect your USB device.
14. Finished. No more Autoplay.

**if there is no Folder Options, then it might have been disabled by the administrator, or your system also has already been infected.

===================================

Also dont Reboot PC (pressing restart button.) while your USB Device is inserted. it can corrupt data...

[Ridwan sameer]

Ahh you should specify which Operating system you are using. Users of linux will be trying to remove viruses from their USB now well anyway thanks and this is a nicepiece of information.

Hope to see more posting from you

[arnavn3]

Hey I tried this out..it worked for me..but those files keep on coming back to the drive even after i delete 'em..although the autorun doesnt work anymore, but those files are still there on the device.and they can spread this way, if not harm my USB device..so could anyone help me out with that..thanks..regards..

[iGuest]

HOW CAN I UNPROTECT A FLASHDISK
Virus On Your Flash Disk? (usb Devices)

I HAVAE BEEN EXPERIENCING THE PROBLEM PAST 2 WEEKS NOW.

I OPENED MY FLASHDISK AND I SAW MY FILES THERE BUT WHENEVER I TRY TO OPEN ANY FILE, IT SAYS; THE DISK IS PROTECTED.

HOW CAN I RESOLVE THIS PROBLEM TO START SAVING MY FILES INSIDE.

AM WAITING FORWARD FOR YOUR REPLY.

THANKS.

FROM; JOHNNY

-question by ENWOR JOHN

[iGuest]

error message displayed when i insert flash disk!!
Virus On Your Flash Disk? (usb Devices)

When I insert my flash drive its displaying eror mess
!soundmix.Exe-corrupt file

The file or directory autorun.Inf is corrupt and un readable,please run the Chkdsk utility.
And also I cannot format the disk .The files present on the disk are not deleting ...Can anyone help me out

[jopak134]

write-protected? maybe there's a switch in your usb.

i think there are programs that you can use that will format your usb just google it.

[iGuest]

For resolve USB problem just do this way.
1) Go to Run and then type CMD
2) In any drives type: Attib -s -h -are Autorun.Inf
3) After find it type: Del Autorun.Inf

-reply by Loghman Adak

[iGuest]

Good Morning:

I have a problem with a virus in my flash USB kingston, I have a virus in autorun.Inf and create another archive named Lio.Vbs and when I delete manually the virus and put the another autorun.Inf to replace it, the virus is recover again and replace my archive of autorun.Inf and create again Lio.Vbs. How I can do to prevent that the virus come again and infect my drive?.

Another thing, autorun and Lio appear has hidden, Read - Only and Archive and I cannot remove hidden because the option has disabled.

Thanks for the answer from antelation and excuse my english, if are something wrong.

Lance.

[iGuest]

Replying to Trap FeedBacker

I have the same problem with that lio.Vbs, my pc systems is infected, because Avira Antivir detected it:

The file 'C:WINDOWSsystem32Lio.Vbs'
Contained a virus or unwanted program 'HEUR/HTML.Malware' [heuristic]
Action(s) taken:
HKEY_LOCAL_MACHINEC:WINDOWSsystem32userinit.Exe,C:WINDOWSsystem32wscript.Exe C:WINDOWSsystem32Lio.Vbs
The fund was classified as suspicious.
The file was moved to "48b4e016.Qua"!

After I send it to quarentena, because I couldn't erease it, my script host send me a message after each reload: the archive lio.Vbs is unable in 'C:WINDOWSsystem32Lio.Vbs'
I don't want this in my startup, how I can finish it?

Ahh, my USB was infected too, but the antivir could clean it.

-reply by josebrrs

[ckcomputerstallahassee]

FeedBacker, on Mar 5 2008, 03:45 AM, said:

error message displayed when i insert flash disk!!

And also I cannot format the disk .The files present on the disk are not deleting ...Can anyone help me out

I had a similar problem with my sandisk drive. I went to my computer --> manage-->then go to disk management
It should see the drive there, where you can manually reformat it.