Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: So Infected Flash  (Read 6403 times)

0 Members and 1 Guest are viewing this topic.

wissamyoussif

    Topic Starter


    Beginner

    So Infected Flash
    « on: May 10, 2009, 08:15:04 AM »
    Hi all, I have this thumb drive so infected that it behaves like a (Read-Only) although it's got no physical lock or something: infected files cannot be neutralized with an up-to-date Norton Antivirus 2008, flash cannot be formatted, and even when plugged into a Linux-run machine the files still cannot be deleted or modified. What can I do?
    Thanks all

    Carbon Dudeoxide

    • Global Moderator

    • Mastermind
    • Thanked: 169
      • Yes
      • Yes
      • Yes
    • Certifications: List
    • Experience: Guru
    • OS: Mac OS
    Re: So Infected Flash
    « Reply #1 on: May 10, 2009, 08:17:09 AM »
    You've tried formatting the flash drive?

    How about trying to format it on another computer?

    wissamyoussif

      Topic Starter


      Beginner

      Re: So Infected Flash
      « Reply #2 on: May 10, 2009, 08:28:32 AM »
      wow that was fast, thanks Dudoxide for your quick reply, of course I've tried to format it on many other comuters, some even run by systems other than Windows, but no format, no deleing and nothing ever I can do

      Carbon Dudeoxide

      • Global Moderator

      • Mastermind
      • Thanked: 169
        • Yes
        • Yes
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Mac OS
      Re: So Infected Flash
      « Reply #3 on: May 10, 2009, 08:31:43 AM »
      Does this flash drive have U3 by any chance?

      Anyways, We need more information. Please look here: http://www.computerhope.com/forum/index.php/topic,33586.html

      wissamyoussif

        Topic Starter


        Beginner

        Re: So Infected Flash
        « Reply #4 on: May 10, 2009, 08:38:10 AM »
        Dude, I've been into Computer Hope for years and into computers for even more, I've tried everything on many computers with different specifications but nothing works and the problem persists. However, I don't have a clue about U3

        Carbon Dudeoxide

        • Global Moderator

        • Mastermind
        • Thanked: 169
          • Yes
          • Yes
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Mac OS
        Re: So Infected Flash
        « Reply #5 on: May 10, 2009, 08:45:54 AM »
        Dude, when did it start? Do you have any indications it is a virus?

        What model and make is the flash drive?

        KingPincer



          Intermediate

          Thanked: 9
          Re: So Infected Flash
          « Reply #6 on: May 10, 2009, 09:31:26 AM »
          How about scanning your flash drive and paste the details in a notepad so that everyone can see what's inside your USB.

          wissamyoussif

            Topic Starter


            Beginner

            Re: So Infected Flash
            « Reply #7 on: May 12, 2009, 12:28:27 PM »
            Hi all, thanks for your interest, actually it's not my own flash, it's my sister's. I'm gonna provide you with the flash'es Norton scanning details along with every details I can get once I'm back from my 5-days travel, and sorry for being late.

            wissamyoussif

              Topic Starter


              Beginner

              Re: So Infected Flash
              « Reply #8 on: May 17, 2009, 12:53:16 AM »
              Hi all, again: Dude-oxide (I like that nickname by the way), it is a virus and it looks like a serious one, at least that's what Norton's telling me as you might see in the scanning report attached herewith. The flash is a Chinese made 2GB genx, nothing special. It was infected in my sister's University's public computers: I used to treat those stuff first with USB GATE Beta Version, replug it and scan it with an updated Norton and everything's normal and clean. However, this is the first time the flash does not response to any of that: it behaves like a read-only.
              KingPincer, is there anything else I can provide?
              Thanks all

              [attachment deleted by admin]

              Carbon Dudeoxide

              • Global Moderator

              • Mastermind
              • Thanked: 169
                • Yes
                • Yes
                • Yes
              • Certifications: List
              • Experience: Guru
              • OS: Mac OS
              Re: So Infected Flash
              « Reply #9 on: May 17, 2009, 01:10:16 AM »
              Unfortunately, I can't make heads or tails out of that log you just provided.

              Download Flash Disinfector by sUBs and save it to your Desktop.
               
              * Double-click Flash_Disinfector.exe to run it.
              * Your desktop and icons may disappear. This is normal.
              * It will do a cleanup of removable storage devices, and write a protected Autorun.inf file to help prevent re-infection.
              * Follow any prompts that may appear.
              * The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.
              * Wait until it has finished scanning and then exit the program.
              * There will be no GUI interface or log file produced.
              * Reboot your computer when done.

              Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don't delete this folder. It will help protect your drives from future infection.

              wissamyoussif

                Topic Starter


                Beginner

                Re: So Infected Flash
                « Reply #10 on: May 17, 2009, 01:28:01 AM »
                oops, file is damaged, here's a clean one (cross fingers)

                [attachment deleted by admin]

                Carbon Dudeoxide

                • Global Moderator

                • Mastermind
                • Thanked: 169
                  • Yes
                  • Yes
                  • Yes
                • Certifications: List
                • Experience: Guru
                • OS: Mac OS
                Re: So Infected Flash
                « Reply #11 on: May 17, 2009, 01:31:33 AM »
                I cannot confirm it, but I think you are infected.

                Run the Flash Disinfector first and see how it turns out.

                wissamyoussif

                  Topic Starter


                  Beginner

                  Re: So Infected Flash
                  « Reply #12 on: May 17, 2009, 01:33:38 AM »
                  no no, that's a compressed one

                  [attachment deleted by admin]

                  Carbon Dudeoxide

                  • Global Moderator

                  • Mastermind
                  • Thanked: 169
                    • Yes
                    • Yes
                    • Yes
                  • Certifications: List
                  • Experience: Guru
                  • OS: Mac OS
                  Re: So Infected Flash
                  « Reply #13 on: May 17, 2009, 01:39:42 AM »
                  Ummm....The one you just attached is compressed. I'm not going to download it in case your computer is infected. .txt files would be safest at the moment.


                  KingPincer



                    Intermediate

                    Thanked: 9
                    Re: So Infected Flash
                    « Reply #14 on: May 17, 2009, 03:26:06 AM »
                    I have a flash disinfector here but haven't used it since my USB is clean. BTW i agree with carbon maybe this software could help you. One question carbon do you still have to temporarily disable the protection of your anti virus before using this?