Thread: USB flash drive virus

hello guys.......
i've got a problem with my flashdrive.when i inserted my pendrive,i show the folder icon instead of the normal pendrive icon.
i manually deleted the autorn.inf file and recycler folder from my pendrive and my normal pendrive icon reappers.
i can also be able to access my data from it.
but the RECYCLER folder is recreated again.how to get rid of it?
is it because of ISE32.exe on C/recycler??is it harmful for my pc?
AVIRA personal edition shows a warning while scanning the system.plz help/.....

You need to remove it manually.. Follow the steps.

Set command prompt path to c:\recycler now open task manager and kill the process "explorer.exe" after that go back to command promt and then type del*.*. Once it's done run explorer.exe from taskmanager, after that open registry editor by typing "regedit" or "r" on run, locate following key

1.HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{28ABC5C0-4FCB-11CF-AAX5-81CX1C635612}

2.HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{28ABC5C0-4FCB-11CF-AAX5-81CX1C635612}

Also search "ise32.exe" in whole registry and delete it. Clear you peb drive and delete autorun.inf



P.S
Initially try to clean it with antivirus.. As you mentioned "Avira" is only giving warning, switch your antivirus and then try it, if they also fail to clean then only apply above steps....

Give a try with Autorun Eater hope your problem is solved.

thanks for the info....but can u plz give me a detailed a step by step guide ???

Did you changed your AV??

no i haven't changed my av,....

So switch to some other av...Give other av a try..They might solve your problem.. If they don't then only follow the previous post steps..

Download the trial version of Kaspersky 2009 and scan the PC. All virus, spyware problems should be eliminated.

@ prasanta08

Is your problem solved???

I had similar problems

First identify the exe file indicated in autorun. use this file name in registry>edit>find. You will find all related files and registry entries. If you start deleting exe files and all, it will be replaced in no time. Start from registry.identify the location of files. most probably you will find on in system32, like : run dll as application". identfies these files from registry entries, take a noted pad, note these locations. now delete the registry entries. Then using the location, make sure you delete these infections. it will not get replaced. it worked for me. no antivirus is good enough for these kind of threats. you have to do it manually. left unnoticed, they will download fatal files. Also, reinstall your browser. it is necessary.

all the best

dilip

Try this free but powerful called free commander.Sorry i'm not able to post the URL because i'm a new member. Just search for it in Google
Download FreeCommander and install it. Launch it and enter the Extras>Settings menu and to open the Settings dialog. Now click on the ‘Shell menu’ item on the tree at the left and add FreeCommander to the ‘Drives’ context menu. Click on OK to save the settings. You can also close FreeCommander now. I repeat, this method is 100% effective only if you disable Autoplay. Now once you insert you thumb drive, open your Computer and right-click on the drive icon and select FreeCommander. Now FreeCommander should launch with the contents of the drive on the right pane. Look for autorun.inf, .bat files (DOS scripts), .vbe & ,vbs files (VB scripts). All these are potentially viruses (more so when they’re grayed out, meaning they’re hidden). Now select and delete them:gun_bandana:

U can also use Ikill. Download after Googling it. Its also free.

I personally use both to keep me protected from the USB type viruses

thanks for the reply...i've also heard abt free commander..
but if u people can give a detailed description or steps regarding the usage of pen drive....then it would be of great help for all flash drive users.....
like how to prevent our pc from pen drive virus,or how to open the pen drive so that virus could not harm our system or any suggestion abt pendrive antivirus...etc.....
if u can do this...it would be great...
with regards....
prasanta:48::48::48:

First of all Disable autorun in your system.
Also in most cases the file autorun.inf will be corrupted, even if you delete that file from your pendrive,next time if you plug it in someone else's system it is sure to reappear and the virus exploits it. So use Ikill as it keeps on deleting the autorun file as soon as you plug your pendrive. Always keep Ikill in startup and enable auto protect option.

Use freecommander to explore the Pendrive first,delete suspicious files.

Never ever double click your pendrive to open them:nono: as most virus is programmed to execute itself when you double click it. Instead right click and explore. Do not open suspicious folders. Keep your AV updated regularly.

Above all Its best to Format Your pendrive atleast once a month so that you are free from malwares

@ prasanta08
So many good replies...Hope you sort it out now....

Use panda tool (softpedia).. Nothing else needed.

just format ur flash drive

thanks.. to you all......i think it can solve my problem......

Originally Posted by prasanta08

thanks.. to you all......i think it can solve my problem......

What solve your problem, It's always good to mention the solution, It might help others.