1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive patah hati infected to pen drive

Discussion in 'Malware and Virus Removal Archive' started by prtikul, 2010/10/17.

Thread Status:
Not open for further replies.
  1. 2010/10/17
    prtikul

    prtikul Inactive Thread Starter

    Joined:
    2010/10/17
    Messages:
    6
    Likes Received:
    0
    [Inactive] patah hati infected to pen drive

    I have transcend 8 GB pen drive which is badly infected. I have very important seminar day after tomorrow so Should I connect to my laptop which have only one drive and Windows vista with AVG anti virus9.0
    Please help me how I should remove this virus from Pen drive.
     
    prtikul,
    #1
  2. 2010/10/17
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Install this on your laptop, then plug in your USB drive and scan it with your AV program.
    If you don't have any important data there, format the drive.

    Download, and run Flash Disinfector, and save it to your desktop (Windows Vista and Windows 7 users, scroll down)

    *Please disable any AV / ScriptBlockers as they might detect Flash Disinfector to be malicious and block it. Hence, the failure in executing. You can enable them back after the cleaning process*

    • Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
    • The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.
    • Hold down the Shift key when inserting the drive until Windows detects it to keep autorun.inf from executing if it is present.
    • Wait until it has finished scanning and then exit the program.
    • Reboot your computer when done.
    Note: As part of its routine, Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive that was plugged in when you ran it. Do not delete this folder...it will help protect your drives from future infection by keeping the autorun file from being installed on the root drive and running other malicious files.

    Windows Vista and Windows 7 users
    Flash Disinfector is not compatible with the above Windows version.
    Please, use Panda USB Vaccine
     
    broni,
    #2


  3. to hide this advert.

  4. 2010/10/17
    prtikul

    prtikul Inactive Thread Starter

    Joined:
    2010/10/17
    Messages:
    6
    Likes Received:
    0
    I have done as you instructed by using Pana vaccine and by holding shift key with AVG closed but even after Panda shown PD is vaccinated then I scanned with AVG where I got 7 worms which removed to vault.
    "Infection "; "Virus identified Worm/VB.BDI "; "H:\Pratiksteering system.doc .exe ";" "; "17-10-2010, 23:29:06 "
    "Infection "; "Virus identified Worm/VB.BDI "; "H:\Pratik\steering system.doc .exe ";" "; "17-10-2010, 23:29:07 "
    "Infection "; "Virus identified Worm/VB.BDI "; "H:\Patah Hati.doc .exe ";" "; "17-10-2010, 23:29:07 "
    "Infection "; "Virus identified Worm/VB.BDI "; "H:\steering system.doc .exe ";" "; "17-10-2010, 23:29:07 "
    "Infection "; "Virus identified Worm/VB.BDI "; "H:\PratikPARTHA DAS SHARMA.docx .exe ";" "; "17-10-2010, 23:29:08 "
    "Infection "; "Virus identified Worm/VB.BDI "; "H:\Pratikpowerplant.docx .exe ";" "; "17-10-2010, 23:29:08 "
    "Infection "; "Virus identified Worm/VB.BDI "; "H:\PratikSAMEER REPORT.docx .exe ";" "; "17-10-2010, 23:29:08 "
     
    prtikul,
    #3
  5. 2010/10/17
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    It's normal.
    Panda doesn't remove anything.
    It's just preventing anything from USB drive to run automatically, when the drive gets connected.

    I suggest, you rescan that drive with one of online scanner, like Eset: http://www.eset.com/onlinescan
     
    broni,
    #4
  6. 2010/10/17
    prtikul

    prtikul Inactive Thread Starter

    Joined:
    2010/10/17
    Messages:
    6
    Likes Received:
    0
    Thank you for the help as you are right on spot that computer vaccination feature in panda disables autoexecution which was useful. Now I am going for on line scan.I have one query is it possible to recover corrupt file which is infected without restoring virus from vault.
     
    prtikul,
    #5
  7. 2010/10/17
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    I doubt, it's possible, however I do have some questions...

    How did USB drive get infected?
    Is your computer clean?
    I'm asking, because this particular worm places itself mostly inside MS Office files.
     
    broni,
    #6
  8. 2010/10/17
    prtikul

    prtikul Inactive Thread Starter

    Joined:
    2010/10/17
    Messages:
    6
    Likes Received:
    0
    I have got this worm from my friend's laptop today where He uses outdated Net protector anti virus.Now some of the documents are corrupted although I don't need them urgently now but is it possible to recover very important word file from infected PC?
     
    prtikul,
    #7
  9. 2010/10/17
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Your friend's PC?
     
    broni,
    #8
  10. 2010/10/17
    prtikul

    prtikul Inactive Thread Starter

    Joined:
    2010/10/17
    Messages:
    6
    Likes Received:
    0
    Actually my laptop is in home which is 60 km's away from friends PC and as far as I recall I haven't exchanged any data with him from the date he formatted it last time and only my PD gets infected whenever I connect it to his laptop today.
     
    prtikul,
    #9
  11. 2010/10/17
    prtikul

    prtikul Inactive Thread Starter

    Joined:
    2010/10/17
    Messages:
    6
    Likes Received:
    0
    Thank you for your valuable suggestion which was really useful so If any problem arises I will ask for help in near future as currently I am busy with work.
     
    prtikul,
    #10
  12. 2010/10/17
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    I'm really not sure, what you're saying.
    What files do you want to recover and from what computer?
     
    broni,
    #11
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...