I
I
iNickname2017-09-28 05:37:10
Windows
iNickname, 2017-09-28 05:37:10

How to remove a virus that creates 4 shortcuts, autorun.inf and a RECYCLER folder on a flash drive. Runs the firefox.exe process at system startup?

It also infects .exe files of installed programs. Creates a folder and file in Program Files of type esddpmdr/myupappji.exe (random names). If you remove the virus (supposedly) and run the infected program, it will recover again. Well, sedum autostart does not help get rid of the firefox.exe process at the start. How is it understood that generally it launches?
If you delete files from the flash drive, then they reappear later.

Answer the question

In order to leave comments, you need to log in

3 answer(s)
L
Ltonid, 2017-09-28
@iNickname

In short, boot from live media and run any convenient antivirus. They clean up such an infection quite effectively. After auto-cleaning, take autoruns and clean autoload in offline analize mode. If the live media supports the network, then you can immediately turn on the virustotal check if you are in doubt about the startup list.
99% that the virus itself will not start. Next, reboot into normal mode and install a full-fledged antivirus or clean the system using AVZ and the like.
To prevent such muck from working on flash drives, I recommend creating autorun.inf system folders nested in each other on the flash drive. For 15 years now, such protection has been keeping my flash drives.

A
alex_ak1, 2017-09-28
@alex_ak1

I create an autorun.inf folder on flash drives. The virus copies itself, but the autorun file can no longer be created and remains passive.
By the way, the folder almost immediately becomes invisible on almost all computers :)))

E
Eugen L, 2017-09-28
@KBegemoT

1) Disable auto start from media.
2) msconfig disable everything superfluous (suspicious) in the startup and services column
3) Clear the Task Scheduler.
4) Clean up the excess in the registry branches (google it)
5) AVZ
6) Delete .bat in the system root (if any)
7) Clear the TEMP folder
8) Format the USB flash drive.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question