SS TechLog

With Flash (USB) drives being so cheap (thanx to the leaks in some of the defense departments ) almost everyone in my class has those little memory devices with them.

But from past few months the devices are acting strangely! When you double click on the flash drive icon in my computer, you either get a message saying the device is inaccessble or could not be recognised or a dialogs box will appear with ‘Open with..’ title.

And the flash drive contains following hidden files n folders.

1. autorun.inf
2. Recycled (folder)
3. Recycled\driveinfo.dll
4. Recycled\voinfo.dll
5. Recycler (folder)

So what to do?
The best and easiest way is to update your antivirus system with new virus definitions. What if you cant? There is one more way!
Do it Manually! Be a virus hunter!But how?

Follow the steps.

1. first we need to boot the PC to a safe mode of Windows.
2. Open the registry (click START, then click RUN, type regedit and click OK.
3. On the Registry Editor, look for the entry which contains “inetsrv” (press ctl-f, type inetsrv and click OK)
4. Delete all entries that contains inetsrv.exe.
5. Repeat step 3 and 4 until it will prompt you that the files are not found, which means that the entries that contain “inetsrv” are all deleted.
6. Change the View option of the Windows explorer to “View All”, for us to view hidden files.
7. Search for the files created by this worm as mentioned above and delete them all.
8. After these, restart the PC and boot it to normal.

(The steps are given by Symantec.

Well there is one more way to remove the virus and you DON’T HAVE TO RESTART THE COMPUTER!.

1. Download the following files.

remove_usb.bat

remove_vir.bat

2. Place remove_vir.bat in the C: (or system) drive and reomve_usb.bat in the flash drive.

3. Whats next? Run them by double-clicking!!

(If this doesn’t work, try to Disable the System restore

1. Goto Run & type ‘msconfig’ and press Enter.

2. click on ‘Launch System Restore’ button

3. View System Restore Settings’ and Disable the System Monitoring!

4. Enable it after you run those .bat files

Although it won’t harm computer, but its not recommended !)

Finally, a word of caution: I have been using these file to remove the virus for quite a long time, but I do not take 100% guarantee that it will work on your PC!

Bookmark It

Hide Sites