Monday, February 1, 2010

How to Remove Virus from your Pen Drive / USB Pendrive

Monday, February 1, 2010

This post is for people who have their pen drives infected with a certain type of Trojan horse and want to get rid of the autorun.ini file.

1. Insert your pen drive into one of the available USB ports on your computer. If you get a pop up for the autorun display, select 'Cancel'. Do not double-click on the drive icon to open the drive.

2. Double-click on the 'My Computer' icon on the desktop. Then select 'Tools', 'Folder Options' and 'View' from the menu bar on top. Select 'Show hidden files and folders' and uncheck the box next to 'Hide extensions for known files'. Also uncheck the box for 'Hide protected operating system files (Recommended)'. If you see a warning message, click 'OK'. Click 'Apply' and 'OK' to save all changes.

3. Verify the drive letter that represents your USB or pen drive. For example, if the drive displays as Trasncend (K:), the drive letter would be 'K'.

4. Click on 'Start', 'Run'; type 'cmd' and press enter to open the command prompt window.

5. Type the drive letter, for example, 'K' followed by a colon (':'), and press enter at the command prompt to open the root directory of the drive.

6. Type 'dir/w/o/a/p' and press enter to display a list of files and folders present on the flash drive. Note the existence of any of the following in particular:

  • Autorun.inf

  • New Folder.exe

  • Bha.vbs

  • Iexplore.vbs

  • Info.exe

  • New_Folder.exe

  • Ravmon.exe

  • RVHost.exe

  • svchost.exe

  • Heap41a

  • Any miscellaneous file name with an .exe extension

  • Any unfamiliar files

7. Unprotect the files to enable deletion. From the command prompt, type 'attrib -h -r -s autorun.inf' and press enter.

8. Repeat Step 7 for each of the files identified in Step 6.
9. Delete each of the files that have been unprotected by typing 'del', pressing the space bar and typing the file name, for example, 'del autorun.inf'.

10. Type 'exit' and press enter to return to Windows Operating System. Your USB flash drive is now virus free.


Post a Comment

Contact Me