PDA

View Full Version : Virus on my USB flash drive.How to remove it?



skoman
2008-11-07, 17:19
Hello noble people dedicated to the common good.
I've been helped here many times.I'm so happy that there is such place on the web where people can help other people cleaning their PC from nasty malware.

This time I'd like to ask how can I remove virus from my USB flash drive without loosing any data from it?
I have clam win antivirus.
It says that

H:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\stcvhost.exe: Worm.Autorun-1617 FOUND

I believe that I have not infected my PC yet, since I did not execute anything from my flash drive.I have not even open it.I just scanned it with clam win antivirus.
Thanks in advance.

skoman
2008-11-07, 21:36
I think I deleted it with killbox.exe
Clamwin does not detect it anymore.

pskelley
2008-11-09, 16:22
Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
"BEFORE you POST" (READ this Procedure before Requesting Assistance) http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

Make sure you read and follow the directions, anything else will slow the process and waste both of our time. I suggest you keep this computer offline except when troubleshooting, the junk may download more. If you have any tool I use, delete it and download it new from the link I provide. Read and follow the directions carefully, the tools will not work unless you do.
The junk can be tough to remove, so do not expect fast or easy.

I have no way of knowing since you have not provided the correct information. I can post this for you:

Download this removal tool to your desktop:
http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe
If you have any flashdrives being used previously, since this is a flashdrive infection, insert your flashdrive as well, because above tool will disinfect it as well.
Then doubleclick the Flash_Disinfector.exe to run the tool.
Your desktop and icons will disappear afterwards. This is normal.
When the tool has finished, reboot your computer.

But I will not comment again unless the directions which are posted above and pinned (sticky) to the top of this forum, are followed.

Thanks

skoman
2008-11-12, 22:14
Thanks for the reply.I cleaned my flash drive with.And I'm not infected.That's why I did not post HJT log file in my first posts.

However my friend's computer is infected, since I plugged my USB flash drive in his computer.So I got the stcvhost.exe worm from it.
His computer is not connected to the internet so it will take a while to get HJT logs from his machine and post them here.

I just have one question.
The only way to get my PC infected is if I browse his computer(if we are connected in a LAN) or if I open a contaminated flash drive on my PC.Am I right?

pskelley
2008-11-12, 23:16
I just have one question.
The only way to get my PC infected is if I browse his computer(if we are connected in a LAN) or if I open a contaminated flash drive on my PC.Am I right?
Not really sure what you are asking, there are many ways to get infected, I will post just a little information.

http://news.cnet.com/8301-1009_3-9992897-83.html
http://www.youtube.com/watch?v=zBUZHiKhsog
http://en.wikipedia.org/wiki/Russian_Business_Network
http://rbnexploit.blogspot.com/
http://en.wikipedia.org/wiki/Vundo_trojan
http://www.google.com/search?hl=en&q=infected+websites&btnG=Google+Search
http://news.cnet.com/8301-1009_3-10004970-83.html?tag=nl.e703

and ways to avoid it:
Some good information for you:
http://users.telenet.be/bluepatchy/miekiemoes/slowcomputer.html
http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/tips/mcgill1.mspx

Here is some great information from experts in this field that will help you stay clean and safe online.
http://users.telenet.be/bluepatchy/miekiemoes/prevention.html
http://forums.spybot.info/showthread.php?t=279
http://russelltexas.com/malware/allclear.htm
http://forum.malwareremoval.com/viewtopic.php?t=14
http://www.bleepingcomputer.com/forums/topict2520.html
http://cybercoyote.org/security/not-admin.shtml

http://www.malwarecomplaints.info/

Thanks...pskelley
Safer Networking Forums
http://www.spybot.info/en/donate/index.html
If you are reading this information...thank a teacher,
If you are reading it in English...thank a soldier.

http://users.telenet.be/bluepatchy/miekiemoes/Links.html