Thursday, December 1, 2011

How to prevent your PEN drive from VIRUS


How to prevent your PEN drive from VIRUS


  • Connect your Pen Drive or USB drive to your computer.
  • Now a dialogue window will popup asking you to choose among the options as Don’t choose any of them , Just simply click Cancel.
  • *Now go to Start–> Run and type cmd to open the Command Prompt window .
  • *Now go to My Computer and Check the Drive letter of your USB drive or Pen Drive. ( E.g. If it is written Kingston (I:) , then I: will be the drive letter .)
  • *In the Command Window ( cmd ) , type the drive letter: and Hit Enter .
  • *Now type dir/w/o/a/p and Hit Enter
  • *You will get a list of files . In the list , search if anyone of the following do exist
  • 1. Autorun.inf
  • 2. New Folder.exe
  • 3. Bha.vbs
  • 4. Iexplore.vbs
  • 5. Info.exe
  • 6. New_Folder.exe
  • 7. Ravmon.exe
  • 8. RVHost.exe or any other files with .exe Extension .
  • If you find any one of the files above , Run the command attrib -h -r -s -a *.* and Hit Enter.
  • Now Delete each File using the following Command del filename ( E.g del autorun.inf ) .
  • That’s it . Now just scan your USB drive with the anti virus you have to ensure that you made your Pen Drive free of Virus .

Remove Recycled Virus

To manually remove it follow the following steps (Note you should understand what you’re about to do, you try it at your own risk!)
1. Boot your system in Safemode
2. Go to command prompt, in Drive C do the following commands.
3. Type -> ATTRIB -H -R -S AUTORUN.INF then press enter
4. Type -> DEL AUTORUN.INF then press enter
5. Type -> ATTRIB -H -R -S Recycled then press enter
6. In Windows Explorer in Safemode, remove the folder Recycled in drive C use Shift-Delete to delete the folder.
7. Repeat Step 3 to 6 for all drives of your system including the USB drive.
8. Search for CTFMON.EXE in your system using the Search of Windows found in Start Menu. If you find a file that is not located in C:\WINDOWS\SYSTEM32, delete it immediately. Dont forget to empty the recycle bin afterwards (Usually the virus will copy itself in the Startup folder of the Startmenu. Check if the file is present there and delete it then.)

1 comment: