Before attaching your flash drive to the infected machine, run this
Please download Flash_Disinfector.exe
by sUBs and save it to your desktop.
Note: As part of its routine, Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive that was plugged in when you ran it. Do not delete this folder...it will help protect your drives from future infection by keeping the autorun file from being installed on the root drive and running other malicious files.
- Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
- The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.
- Hold down the Shift key when inserting the drive until Windows detects it to keep autorun.inf from executing if it is present.
- Wait until it has finished scanning and then exit the program.
- Reboot your computer when done.
Download this and run it on the infected machineWe Need to check for Rootkits with RootRepeal
- Download RootRepeal from the following location and save it to your desktop.
- Direct Download (Recommended)
- Zip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)
- Extract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).
- Riight-click on rootrepeal.exe and rename it to tatertot.scr
- Open on your desktop.
- Click the tab.
- Click the button.
- Check all seven boxes:
- Push Ok
- Check the box for your main system drive (Usually C:), and press Ok.
- Allow RootRepeal to run a scan of your system. This may take some time.
- Once the scan completes, push the button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.
Please note: If Rootrepeal fails to run, try this steps:
Click Settings - Options. Set the Disk Access slider to High
Right-click on rootrepeal.exe and rename it tatertot.scr
Select to scan only Drivers
why won't my laptop work?
Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook