How to Remove USB Flash Drive Virus Easily

They may not be major risks but USB flash drive viruses are annoying.

Among the most common are Cool_USEP Scandal (sowar.vbs) and Ravmon (ravmon.exe). At first, my computer gets infected whenever someone asks me to copy/paste a file from/to a USB flash drive. Later, I found out it was caused by the culprit - Autorun.inf, which spreads the virus.

Here's how to defeat them easily!

  • If a small window similar to the image pops up, do not click 'OK '. Instead, click 'Cancel'.
  • Now, go to Start\Run and type 'cmd' to open the Command Prompt.
  • In the command prompt, type the drive letter: (ex: E:) and press Enter .
  • Now type dir /w/a (dir_space_slash_w_slash_a) and press Enter. A list of the files contained in the USB flash drive will be shown.
  • Check whether the following files are present: ravmon.exe, Cool_USEP Scandal.exe, Autorun.inf, svchost.exe or any other suspicious executory files. If these are present, the USB flash drive is infected.
  • Still in Command Prompt, type attrib -r -a -s -h *.* and press Enter. The 'read only', 'archive', 'system' and 'hidden' attributes of all the files will be disabled.
With Eset NOD32 running in your computer, the virus probably is eliminated by now. But if it's still present in your USB flash drive, do the following steps:

  • Turn-off System Restore service. Right-click 'My Computer'/Properties/System Restore tab, check "Turn off System Restore on all drives" and click 'Apply' and 'OK'.
  • Open 'My Computer', right-click your flash drive and click 'Explore' (very important). Right-click on the virus and related files and click delete, or right-click / NOD32 Advanced options and click 'Quarantine file'.
  • Open NOD32 and go to Tools/Quarantine and remove (del) the quarantined files.
  • Restart computer and turn-on System Restore.
Just follow these steps carefully and say goodbye to viruses.

9 comments:

Anonymous,  Thursday, October 30, 2008  

ahahahah your a NOD32 fan now!!!!! ver. 2.7?! i guess! very light & effective especially when your ISP moves like a snail just like SMARTBRO! wahahahaha... also, turn off autoplay on all drives via "GROUP POLICY."

coolbuster Thursday, October 30, 2008  

@ Anonymous, oh yeah, your style of writing is very familiar. my current Nod32 is version 3.0.667.0

and you, you're still inlove with ver. 2.7 huh? anyways thanks for your comment.

Gaell Tuesday, March 24, 2009  

I recently came accross your blog and have been reading along. I thought I would leave my first comment. I dont know what to say except that I have enjoyed reading. Nice blog. I will keep visiting this blog very often.


Ann

http://externallaptop.net

Marco Guapito,  Thursday, May 21, 2009  

Just browse this blog further and you will find the answer.

Anonymous,  Friday, July 16, 2010  

Of course, buy Viagra took their struggle to the internet. Unfortunately, many immoral people decided to take advantage of the situation. In order to protect you from these Viagra Prescription of people, here is a little bit of advice on buying cheap Viagra online from internet pharmacies.

Your words are your own, but you agree that I have the right to delete as I feel appropriate or necessary. - Admin


:)) ;)) ;;) :D ;) :p :(( :) :( :X =(( :-o :-/ :-* :| 8-} :)] ~x( :-t b-( :-L x( =))

  © COOLBUSTER.net 2010 powered by Blogger | Mobile | Archive | Disclosure | Disclaimer | Privacy Policy | Contact | Theme by OurBlogTemplates Mod by CeeBee