USB Autorun Virus Removal

Posted on October 30, 2008. Filed under: Viruses | Tags: autorun, autorun.exe, autorun.inf, disguise, New Folder.exe, remove, USB, virus |

After you have successfully stopped the running virus, you can proceed to removing the autorun virus. In usual cases, you will have access to the USB drive via command prompt. Go to the USB drive’s folder in command prompt, so that you reach a prompt USB:\(example: H:\).

Now type in the command attrib -r -a -s -h *.* and press enter. So that the command prompt will look like

H:\>attrib -r -a -s -h *.*

The command will remove all files’ attributes, namely, read only, archive, system, and hidden.

Now you can see the autorun virus’ components. That is, the hidden autorun.inf(launcher) will be exposed along with the autorun virus, say, autorun.exe. Now you can see the all the files in explorer, and delete them.

Make sure you have unchecked(disabled) the Hide extensions for known file types in My Computer > Tools > Folder Options > View. This will enable you to see programs disguised as folders, so that you will not double click it to open the folder, while in fact you accidentally activate the virus.

If you see a program ,say New Folder.exe, inside the folder with the same name, say New Folder, then it is in almost all cases a virus which you need to remove.

Read Full Post | Make a Comment ( None so far )