How to get rid of a virus that creates shortcuts on a flash drive?

Raul Abdullin2014-09-20 03:38:04

Malware

Raul Abdullin, 2014-09-20 03:38:04

It's called going to the copy center to print documents ..
Friends, help me out. In general, the virus makes shortcuts instead of files on the flash drive, and hides the files themselves.
Yesterday I did everything according to the similar instructions www.antivir.org.ua/useful/virus-na-fleshke
, everything seemed to work out and checked with an antivirus (f-secure-safe), found viruses, deleted it and everything was fine on the flash drive. This afternoon, to calm the soul, I inserted the USB flash drive again, everything is fine.
In the evening, I needed to upload documents for work to a USB flash drive, because. I'm leaving for Asia in 2 days. In general, these labels reappeared. I've googled a lot of sites, but there is no answer to this question anywhere. I don’t know what to do, there is a lot of important information on the computer, as well as on the flash drive, please help me get rid of this scourge (
Operation Windows 7.

Answer the question

In order to leave comments, you need to log in

9 answer(s)

Alexander Kamolov, 2014-09-21
@dintsec

I am very comfortable with the Panda USB Vaccine utility. The description is similar to Autostop, but from a well-known antivirus vendor. Principle of operation: they will turn off autorun on Windows, and on the flash drive itself it creates autorun.inf, with a ban on deletion and modification. That is, the virus can get on the flash drive, but FROM THE FLASH DRIVE is no longer there. Protection works until the first formatting of the flash drive. Then again you need to "vaccinate" the flash drive.

EndUser, 2014-09-20
@EndUser

So the computer is infected? Run 2-4 different antiviruses.
As for flash drives in a public place, this is a one-sided business:
0) Disable all possible autoruns from third-party drives;
1) We copied a document to a USB flash drive, we kept a copy for ourselves;
2) Printed out the document, took the paper;
3) When returning to the computer, immediately format the flash drive, no questions asked.

Konstantin Shkilev, 2014-09-20
@shkilevk

The most popular virus in the army. All computers in the headquarters were infected.))))

Ammie, 2014-09-20
@Ammie

Recently I came across a similar problem, since I have to work on university computers. And in them, as everyone probably knows, there are a million viruses. I recommend a script to protect a flash card from Autorun viruses called Autostop 2.6. Since then, this kind of virus does not bother me. Good luck :-)))

serdimoa, 2014-10-22
@serdimoa

this virus is mostly a joke)
All files remain, but become system hidden, and not just hidden.
And check the computer in safe mode with something like dr.web or Kasp.

Fedor Valyaev, 2015-03-02
@Owlfull

Dr.Web LiveCD to help you! And flash drives with working info need to be bought with a mechanical prohibition of recording.

Mugalim_Igor, 2015-04-09
@Mugalim_Igor

Install COMODO Internet Security, it's free, I installed it and forgot about this type of virus. Moreover, it deletes the shortcuts as soon as you open the USB flash drive. Since then, I put it on all the machines that I have to set up. GCD 32, avast, doctor web licensed and licensed casper just ignore this type of virus.

Erowedge, 2015-09-01
@Erowedge

For a long time I was looking for a solution to the virus-producer (Microsoft Excel.WsF). No antiviruses are taken. Neither DrWeb CureIt, nor Kaspersky, nor Eset. Tried manually deleting it to no avail. The virus is registered in the registry. The UsbFix program helped ( www.en.usbfix.net/download/usbfix/) Download the latest version and press the merciless "Clean". Cleans everything from startup.

Aleksrasp, 2015-10-20
@Aleksrasp

A familiar "semi-hacker" swore that more than 90% of modern viruses ("software bugs") are spread by "anti-virus programs" themselves! Some of the viruses are made by the "antivirus compilers" themselves (who pretend to be "honest holy benefactors"), including those that are meanly hidden EVEN in the antivirus program itself (especially the FREE versions), or blatantly merged in parallel when "downloading" the antivirus from the site , with "late wake up timer". ... Different groups of antivirus programs (like "bandits-terrorists") are not friendly with each other, and even the special viruses invented by them, which "knock out" the antivirus in our computer, cut down the antivirus of only ANOTHER "company", blocking ENTRY TO SITES those antivirus programs, not their own!
___ (Ivan Susanin, Jr. _ "Technological Ponty", vol. 3 'social noodles for the nomenklatura', off-topic chatter No. 75:).