Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Shortcut Virus


  • Please log in to reply
29 replies to this topic

#1 Ali_11

Ali_11

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:16 AM

Posted 30 August 2015 - 07:08 AM

I am using windows xp sp3. whenever I connect any usb drive to my pc it creates a shortcut in the usb. pls tell me how to fix it.Attached File  flashdisk shortcut virus.png   13.35KB   0 downloads


Edited by hamluis, 30 August 2015 - 08:35 AM.
Moved from Win 8 to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,364 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:07:16 PM

Posted 30 August 2015 - 01:12 PM

Click on Start, then Run.
 
Type cmd and press Enter.
 
When the Command Prompt opens copy and paste the following command, then press Enter.
 
attrib -h -s -r -a /s /d Drive-Name:*.*
 
Where is reads Drive-Name enter the drive letter of the drive with the Windows operating system.  This is usually C: drive.  If it is the C: drive the command will be attrib -h -s -r -a /s /d C:*.*
 
The virus should now be gone.  You can delete any shortcuts now.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 Ali_11

Ali_11
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:16 AM

Posted 31 August 2015 - 05:51 AM

I m still getting the shortcut virus.



#4 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,364 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:07:16 PM

Posted 31 August 2015 - 08:23 AM

Click on My Computer and see what drive letter has been assigned to the flash drive.  Use that drive letter in the command.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#5 Ali_11

Ali_11
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:16 AM

Posted 31 August 2015 - 09:21 AM

My usb drive letter is 'F' and I have tried running the command you mentioned but the virus keeps on coming back whenever I attach it to my PC. I want to clean the virus from the computer. I also run the command for my two partitions 'C' and 'D'.



#6 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,364 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:07:16 PM

Posted 31 August 2015 - 09:27 AM

You are running this command with the flash drive plugged into this computer, right?


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#7 Ali_11

Ali_11
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:16 AM

Posted 31 August 2015 - 09:28 AM

Both PC partitions and Usb drive

On 'D' I m getting this in cmd 'access denied D:\system volume information'


Edited by Ali_11, 31 August 2015 - 09:30 AM.


#8 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,364 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:07:16 PM

Posted 31 August 2015 - 09:43 AM

Only run the command of the flash drive (F).

 

Check your drive after the command has run. The folders will now retrieved together with the shortcut viruses.  Delete any unnecessary files and shortcut files that are not supposed to be there.  You might find autorun.inf or desktop.ini; simply delete them.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#9 Ali_11

Ali_11
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:16 AM

Posted 31 August 2015 - 09:49 AM

yes I've got desktop.ini in some folders. I m deleting them.



#10 Ali_11

Ali_11
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:16 AM

Posted 31 August 2015 - 09:56 AM

Should I delete all desktop.ini in my PC ?



#11 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,364 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:07:16 PM

Posted 31 August 2015 - 09:59 AM

As I explained, all of the files have been retrieved together.  Delete those.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#12 Ali_11

Ali_11
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:16 AM

Posted 31 August 2015 - 10:02 AM

I m formatting the whole Usb drive but the virus keeps on coming back



#13 severac

severac

  • Members
  • 872 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:04:16 AM

Posted 31 August 2015 - 12:12 PM

Hi,

 

Sorry to interrupt, but can you try this and tell me the results:

 

Please download MCShield from the following link:

MCShield -Official download link 
 

  • Double click on MCShield-Setup to install the application.
    Next => I Agree => Next => Install ... per installation click on Run! button.
  • Wait a few seconds to MCShield finish initial HDD scan...
  • Connect all your USB storage devices to the computer one at a time. Scanning will be done automatically.
  • When all scanning is done, you need to post a logreport that MCShield has created.

Under Logs tab (in Control Center) for AllScans.txt log section click on Save button. AllScanst.txt report shall be located on your Desktop.

=> Post here AllScanst.txt


Explanation: USB storage devices are all the USB devices that get their own partition letter at connecting to the PC,
e.g. flash drives (thumb/pen drives, USB sticks), external HDDs, MP3/MP4 players, digital cameras,
memory cards (SD cards, Sony Memory Stick, MultiMedia Cards etc.), some mobile phones, some GPS navigation devices etc.

 

MCShield Anti-Malware USB Tool is a lightweight scanner designed to prevent infections transmitted via removable drives (usb, external, camera cards). It's real-time protection is only real-time when you plug-in an external.


I would like to help you to remove malware. Let's look inside.   :busy:

But I don't know to solve all PC problems.  :smash: 

 


#14 Ali_11

Ali_11
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:16 AM

Posted 01 September 2015 - 05:11 AM

>>> MCShield AllScans.txt <<<

-----------------------------




MCShield ::Anti-Malware Tool:: http://www.mcshield.net/

>>> v 3.0.5.28 / DB: 2015.8.23.1 / Windows XP <<<


9/1/2015 3:07:19 PM > Drive C: - scan started (no label ~29 GB, NTFS HDD )...



=> The drive is clean.


9/1/2015 3:07:19 PM > Drive D: - scan started (no label ~45 GB, NTFS HDD )...



=> The drive is clean.





MCShield ::Anti-Malware Tool:: http://www.mcshield.net/

>>> v 3.0.5.28 / DB: 2015.8.23.1 / Windows XP <<<


9/1/2015 3:07:43 PM > Drive F: - scan started (no label ~3746 MB, FAT32 flash drive )...



=> The drive is clean.


 



#15 Ali_11

Ali_11
  • Topic Starter

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:16 AM

Posted 01 September 2015 - 09:20 AM


MCShield ::Anti-Malware Tool:: http://www.mcshield.net/

>>> v 3.0.5.28 / DB: 2015.8.23.1 / Windows XP <<<


9/1/2015 7:18:05 PM > Drive F: - scan started (no label ~3746 MB, FAT32 flash drive )...


>>> F:\Removable Drive (4GB).lnk - Malware > Deleted. (15.09.01. 19.18 Removable Drive (4GB).lnk.596432; MD5: 620be3949a0f9d446bd32c82b154c517)

> Resetting attributes: F:\  < Successful.


=> Malicious files   : 1/1 deleted.
=> Hidden folders    : 1/1 unhidden.

____________________________________________

::::: Scan duration: 4sec ::::::::::::::::::
____________________________________________
 






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users