Virus removal from a USB disk

BleepingComputer.com: Virus removal from a USB disk

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

Virus removal from a USB disk My USB is spreading a virus that I can't remove...

#1 doitall7

New Member

Group: Members
Posts: 1
Joined: 30-June 09
Gender:Male
Location:New York City

Posted 30 June 2009 - 10:49 AM

Hello all,

The main point of this is getting rid of a virus... specifically "FakeAValert" from my USB Flash Stick (4 GB Kingston). Here's the story...

I'm pretty sure the virus was picked up while using one of the computers at my college's library. Unaware of it, I proceeded to use the Flash disk on my own desktop and a few minutes later... voila! FakeAValert. I think the virus was successfully removed from my PC (WinXP) after doing a lot of research online and using Malwarebytes + Symantec Endpoint Protection. Anyway, I also set the virus scanners to the USB just in case.

To make the long story short, I have proceeded to inadvertently infect two additional PCs (I'm currently cleaning my office computer which also runs XP). I'm not sure how to clean the USB without formatting it. Can someone help? This is what I did prior to today's infection:

- Scanned the USB flash disk with both Malwarebytes and Symantec Endpoint Protection.
- Went into the folder tool menu and clicked on "Show Hidden Files and Folders".
- Clicked on all of the folders and didn't find any strange files to delete.

Is there anything else I should do? I'm open to formatting the USB disk, but how can I back up the files without infecting another computer?

Thanks in advance!

#2 quietman7

Bleepin' Janitor

Group: Global Moderator
Posts: 25,108
Joined: 09-July 05
Location:Virginia, USA

Posted 30 June 2009 - 01:27 PM

Download "ClamWin Portable Antivirus", put it on your USB Flash Drive, update its definition files and perform a scan.

Then download Panda USB and AutoRun Vaccine and save it to your desktop.
alternate download link 1
alternate download link 2

Extract (unzip) the file to your desktop and a folder named USBVaccine will be created.
Open that folder and double-click on USBVaccine.exe to start the program.
Click Run.
Click the button to Vaccinate computer..
Insert your USB flash drive.
When the name of the drive appears in the dialog box, click the button to Vaccinate USB drive(s).
Exit the program when done

Note: Computer Vaccination will prevent any AutoRun file from running, regardless of whether the removable device is infected or not. USB Vaccination disables the autorun file so it cannot be read, modified or replaced by malicious code. The Panda Resarch Blog advises that once USB drives have been vaccinated, they cannot be reversed except with a format. If you do this, be sure to back up your data files first or they will be lost during the formatting process.

Microsoft MVP - Consumer Security 2007-2012