Antivirus Protection
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me

The Shed is going Social! Join us on FaceBook and Twitter and chime in on the conversation.

Go Back   Dev Shed ForumsSystem AdministrationAntivirus Protection

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old February 4th, 2013, 12:31 PM
shyjuu shyjuu is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2012
Posts: 17 shyjuu Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 3 h 12 m 7 sec
Reputation Power: 0
Pendrive Virus

Whenever I insert Pendrive shortcut is created for the pendrive, how to recover data and remove this virus

Reply With Quote
  #2  
Old February 4th, 2013, 06:37 PM
Doug G Doug G is offline
Grumpier Old Moderator
Dev Shed God 19th Plane (14000 - 14499 posts)
 
Join Date: Jun 2003
Posts: 14,257 Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level) 
Time spent in forums: 1 Month 4 Weeks 18 h 51 m 19 sec
Reputation Power: 4445
One way is to boot a linux live cd and inspect the files on the usb device. The virus can't execute in a linux environment. I had to do this once to clean a usb stick that was infected.
__________________
======
Doug G
======
It is a truism of American politics that no man who can win an election deserves to. --Trevanian, from the novel Shibumi

Reply With Quote
  #3  
Old February 4th, 2013, 09:04 PM
DonR DonR is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Oct 2009
Posts: 494 DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)  Folding Points: 29722 Folding Title: Starter FolderFolding Points: 29722 Folding Title: Starter Folder
Time spent in forums: 2 Weeks 2 Days 19 h 55 m 31 sec
Reputation Power: 216
Quote:
Originally Posted by shyjuu
Whenever I insert Pendrive shortcut is created for the pendrive, how to recover data and remove this virus

How do you know for sure this is a virus?
Alot of usb hdd & flash drive manufacturers now use an autorun feature which will place a shortcut to your drive on your desktop.
If you don't want this feature , then, just delete/rename your autorun.inf file on the flash drive and see if that cures the issue.

Reply With Quote
  #4  
Old February 5th, 2013, 12:20 AM
Doug G Doug G is offline
Grumpier Old Moderator
Dev Shed God 19th Plane (14000 - 14499 posts)
 
Join Date: Jun 2003
Posts: 14,257 Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level) 
Time spent in forums: 1 Month 4 Weeks 18 h 51 m 19 sec
Reputation Power: 4445
autorun in windows doesn't create any shortcuts.
Comments on this post
DonR agrees: hmm, I don't know why I was thinking that autorun had that capability

Reply With Quote
  #5  
Old February 5th, 2013, 11:16 AM
shyjuu shyjuu is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2012
Posts: 17 shyjuu Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 3 h 12 m 7 sec
Reputation Power: 0
Quote:
Originally Posted by Doug G
One way is to boot a linux live cd and inspect the files on the usb device. The virus can't execute in a linux environment. I had to do this once to clean a usb stick that was infected.


Can I make my Pendrive such that it does not execute .exe files, is it possible to do that

Thanks for the reply

Reply With Quote
  #6  
Old February 5th, 2013, 11:19 AM
shyjuu shyjuu is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2012
Posts: 17 shyjuu Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 3 h 12 m 7 sec
Reputation Power: 0
Quote:
Originally Posted by DonR
How do you know for sure this is a virus?
Alot of usb hdd & flash drive manufacturers now use an autorun feature which will place a shortcut to your drive on your desktop.
If you don't want this feature , then, just delete/rename your autorun.inf file on the flash drive and see if that cures the issue.


It is sure that there is Virus, because when I create some folder ,for example suppose I create folder name DEV, it automatically create the same folder named DEV but size of folder is changed to 737Kb and dll runtime is written automatically

Reply With Quote
  #7  
Old February 5th, 2013, 05:27 PM
Doug G Doug G is offline
Grumpier Old Moderator
Dev Shed God 19th Plane (14000 - 14499 posts)
 
Join Date: Jun 2003
Posts: 14,257 Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level) 
Time spent in forums: 1 Month 4 Weeks 18 h 51 m 19 sec
Reputation Power: 4445
Quote:
Can I make my Pendrive such that it does not execute .exe files, is it possible to do that

There is a setting in windows somewhere to turn off autoplay when cd/usb are inserted. I don't recall where the setting is found though but it should be pretty easy to find, lots of corporate windows workstations have autoplay disabled.

Reply With Quote
  #8  
Old February 5th, 2013, 05:33 PM
Doug G Doug G is offline
Grumpier Old Moderator
Dev Shed God 19th Plane (14000 - 14499 posts)
 
Join Date: Jun 2003
Posts: 14,257 Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level) 
Time spent in forums: 1 Month 4 Weeks 18 h 51 m 19 sec
Reputation Power: 4445
Quote:
hmm, I don't know why I was thinking that autorun had that capability

Well, there are probably a significant number the programs that get called by autorun.inf that create shortcuts automatically, legitimate and viruses. And for all I know there may be some tag you can put in an autorun.inf file that creates a shortcut

Reply With Quote
  #9  
Old February 6th, 2013, 06:19 AM
Joneantivirus Joneantivirus is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2012
Posts: 5 Joneantivirus User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 2 h 9 m 47 sec
Reputation Power: 0
Pendrive Virus

You should scan your pendrive with Anti-Virus installed in your PC, after the complete scanning you should open files from your pendrive.

Reply With Quote
  #10  
Old February 6th, 2013, 08:15 AM
shyjuu shyjuu is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2012
Posts: 17 shyjuu Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 3 h 12 m 7 sec
Reputation Power: 0
I know that and I had already done that setting , then also pendrive is infected by autorun virus

Reply With Quote
  #11  
Old February 6th, 2013, 08:16 AM
shyjuu shyjuu is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2012
Posts: 17 shyjuu Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 3 h 12 m 7 sec
Reputation Power: 0
Quote:
Originally Posted by Joneantivirus
You should scan your pendrive with Anti-Virus installed in your PC, after the complete scanning you should open files from your pendrive.


I do not want to use any antivirus, is there any other way to get proteced

Reply With Quote
  #12  
Old February 7th, 2013, 05:06 AM
Joneantivirus Joneantivirus is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2012
Posts: 5 Joneantivirus User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 2 h 9 m 47 sec
Reputation Power: 0
Pendrive Virus

I) Open a command prompt by click Start -> Run. Type cmd and hit the Enter key.
II) In the command prompt, create a directory in the root directory of the USB drive (By Pointing cmd to the USB disk VIA its drive letter like if its F:/ then type F:/ and hit enter) with command:

mkdir AutoRun.ini

III) Move into this new directory with command:

cd AutoRun.ini

IV) Create a new directory with command:

mkdir a...//

V) Exit the command prompt window with command:

exit

Remove the USB-dirve from the computer and now its immune. And whenever you will plug it into a infected computer the USB won't get infected.

Reply With Quote
  #13  
Old February 7th, 2013, 10:24 AM
shyjuu shyjuu is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2012
Posts: 17 shyjuu Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 3 h 12 m 7 sec
Reputation Power: 0
Smile

Quote:
Originally Posted by Joneantivirus
I) Open a command prompt by click Start -> Run. Type cmd and hit the Enter key.
II) In the command prompt, create a directory in the root directory of the USB drive (By Pointing cmd to the USB disk VIA its drive letter like if its F:/ then type F:/ and hit enter) with command:

mkdir AutoRun.ini

III) Move into this new directory with command:

cd AutoRun.ini

IV) Create a new directory with command:

mkdir a...//

V) Exit the command prompt window with command:

exit

Remove the USB-dirve from the computer and now its immune. And whenever you will plug it into a infected computer the USB won't get infected.


Thanks a lot, Have Great Day

I have doubt here, what is this mkdir a...// mkdir is make directory but what is a...//, will this make directory of name a...

Reply With Quote
  #14  
Old February 8th, 2013, 02:39 AM
vpop vpop is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2012
Posts: 2 vpop Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 1 h 29 sec
Number of bans: 1
Reputation Power: 0
Quote:
Originally Posted by Joneantivirus
I) Open a command prompt by click Start -> Run. Type cmd and hit the Enter key.
II) In the command prompt, create a directory in the root directory of the USB drive (By Pointing cmd to the USB disk VIA its drive letter like if its F:/ then type F:/ and hit enter) with command:

mkdir AutoRun.ini

III) Move into this new directory with command:

cd AutoRun.ini

IV) Create a new directory with command:

mkdir a...//

V) Exit the command prompt window with command:

exit

Remove the USB-dirve from the computer and now its immune. And whenever you will plug it into a infected computer the USB won't get infected.


thanks for this info..accidentally bumped to this thread. i was searching for this solution for a long time

Reply With Quote
  #15  
Old February 8th, 2013, 03:37 PM
DonR DonR is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Oct 2009
Posts: 494 DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)DonR User rank is Captain (20000 - 30000 Reputation Level)  Folding Points: 29722 Folding Title: Starter FolderFolding Points: 29722 Folding Title: Starter Folder
Time spent in forums: 2 Weeks 2 Days 19 h 55 m 31 sec
Reputation Power: 216
BitDefender has a free program that can be used to protect flash drives from things like that autorun virus.
Its called Bitdefender USB Immunizer

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationAntivirus Protection > Pendrive Virus

Developer Shed Advertisers and Affiliates



Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 


Powered by: vBulletin Version 3.0.5
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.

© 2003-2013 by Developer Shed. All rights reserved. DS Cluster - Follow our Sitemap