How to Clean a Virus Infected Flash Drive?

How to Clean a Virus Infected Flash Drive?

The USB flash drive is compact and easy to carry around. However, as the storage device is so common and easily used, the percentage of the drive being infected by viruses has also increased substantially.

 

In the Start-->Run and type cmd to run the Command Prompt Window.In the Command Window, type in your flash drive’s drive letter (if your pen drive is detected as G, then type G: and so on). Once you have gone in to your pen drive, now type dir/w/o/a/p and hit Enter. You will then see a list of files. Search whether any of these files appear or exist:

1. Autorun.inf
2. New Folder.exe
3. Bha.vbs
4. Iexplore.vbs
5. Info.exe
6. New_Folder.exe
7. Ravmon.exe
8. RVHost.exe or any other files with “.exe” extension

Flash Disinfector: was designed to remove unwanted files including autorun.inf on removable USB drives, flash drives and memory sticks. Use flash disinfector if you cannot access your USB drives, flash drives and memory stick due to modifications done by autorun Worms.


1. Download Flash_Disinfector and save it ot your Desktop
2. After downloading, double-click on Flash_Disinfector to run it.
3. Just follow the prompts and continue until it begin scanning.
4. If asked to insert your flash drive or any removable device including USB Pen Drive and Memory Stick, please do so.
5. It will scan removable drives, wait for the scan to finish. Done.


Clean Autoruns: When you open the drive , it says that it could not find the script file C:\autorun.vbs and whenever you right click on it some weird characters are shown.Now you cant open your drives unless you explore them.

The symptom occurs because when autorun.vbs is created by trojan horse or virus. The virus normally loads autorun.inf file to root folder of all hard drive or USB drive, and then execute autorun.bat file which contains script to apply and merge autorun.reg into the registry, with possible change to the following registry key to ensure that virus is loaded when system starts.:


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]Userinit=userinit.exe,autorun.exe

Finally, autorun.bat will call wscript.exe to run autorun.vbs


Autoruns utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, and auto-start services.

• Download autoruns.zip
• Create a target folder for Autoruns, e.g. "%programfiles%\Autoruns".
• Extract all files from autoruns.zip to the target folder.
• Inside your target folder you will find the following files now: autoruns.chm autoruns.exe autorunsc.exe Eula.txt
• To launch Autoruns GUI version double click autoruns.exe.
• If this is the first time you launch autoruns, you may be prompted to agree to the license terms. Either accept them and use autoruns or decline them and remove autoruns from your hard disk, please.
• To launch Autoruns command line version, open cmd.exe. Change to the target folder, e.g. "cd %programfiles%\autoruns". Execute autorunsc.exe plus the appropriate command line arguments.
• To launch Autoruns help file, double click autoruns.chm.

Download Autoruns Virus Remover and Washer: Autoruns Remover and Washer

Download Autorun virus removal tool :It will clean the autorun viruses which are attack to flash drive and only remove autorun viruses when you run the tool.

Autorun Eater:Autorun Eater was born due to increase of malwares using the ‘autorun.inf’ tactic to infect users unknowingly be it from flash drives, removable hard disks or any other removable storage device.

Download :Autorun Eater

Download : Newfolder.exe Removal Tool 2.5

Download BezictoSoft Malwares Loadpoint Removal Tool to remove bha.vbs,RavMon.exe,new folder.exe etc

Ravmon Removal Tools:
http://technodigits.wordpress.com/2007/06/06/ravmon-virus-killer/

Virus RVHost- How to remove it?

The use of USB pen drive devices to spread the virus RVHost and other nasty things is rampant in your part of the world

1. Download and Run ComboFix (how to use it Click here)

 
Download this file from either of the two below listed places :
http://www.techsupportforum.com/combofix.exe
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

2. Doubleclick on combofix.exe and follow the prompts. A window will open with a warning. Type "1" (and Enter) to start the fix. When the scan completes Notepad will open with with your results log open. Do a File, Exit and answer 'Yes' to save changes.

A caution - Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your Drive light. If it is flashing, Combofix is still at work.

2. Clean any remaining autoruns infections.

• Download the "NoScript" utility by Symantec to your Desktop from:
• http://www.symantec.com/avcenter/noscript.exe
• Run the utility and select to "Disable" and then hit OK.
• Then download "Clean Autoruns":
• http://forums.techguy.org/attachments/103397d1176780296/clean-autoruns.zip
• Save and extract its contents to the desktop. It is a folder containing a Batch file, Clean autoruns.bat, Written by Mosaic1. Once extracted, open the folder and double click on the Clean autoruns.bat to run the fix.
• If any autoruns are found, the fix will move them to a backup folder.
• If any autoruns are found on the root of your drives, it will kill explorer so that the registry entries in the MountPoint(s) key are fixed.
• It will produce two files, Part1.txt and Part2.txt , that will show the state before and after the cleaning. You can delete these after examining them.
• Download and run "Flash Drive Disinfector" by sUBs. It does not matter if you have flash drives or not, the program is simply named that:
• http://www.techsupportforum.com/forums/
• There is no GUI interface or log file produced.
• Download and run Autoruns Remover and Washer:
• 
  
• http://www.savefile.com/download/859655?PHPSESSID=d2b639063ee3fd8ed9622af7b99fd929
• (This will also remove RVHost infections).
• 
  
• Run "NoScript.exe" again, choosing "Enable" this time.Finally, download and run the Ravmon Removal Tool: Smart Virus Remover (Details here)
  
  3. Install the XP USB Reliability Update and USB Hotfix:
  
  http://support.microsoft.com/kb/838989
  http://support.microsoft.com/?kbid=918005
  
  Info.exe removal :http://www.spywareremove.com/removeinfoexe.html
  
  XP USB Reliability Update and USB Hotfix:
  
  http://support.microsoft.com/kb/838989
  http://support.microsoft.com/?kbid=918005
  
  How to Remove Autorun Malware from Your Computer:Guidelines
  
  http://www.exterminate-it.com/malpedia/remove-autorun-malware
  
  In some situation especially when anti-virus program has cleaned, healed, disinfected or removed a worm, trojan horse or virus from computer, there may be error happening whenever users try to open or access the drive by double clicking on the disk drive icon in Explorer or My Computer window to try to enter the drive’s folder. The problem or symptom happens in hard disk drive portable hard disk drive or USB flash drive, and Windows will prompt a dialog box with the following message:
  
  Windows Script Host ,Can not find script file autorun.vbs.
  
  How to disable or remove the Windows Scripting Host:
  
  http://service1.symantec.com/sarc/sarc.nsf/html/win.script.hosting.html
  
  NoScript utility:is a small Symantec's program.With it you can disable or re-enable when you want Windows Scripting Host which is the gate for many virus infections.
  
  http://www.symantec.com/avcenter/noscript.exe

How to Prevent Virus Spreading From USB Flash Drives With iKill

Any PC's usually gets infected with viruses whenever I plugin any of  friends Pen Drive. Here is a simple tool known as iKill which prevents the spreading of viruses from Pen Drive to your PC.

It works by scanning the drives for the presence of removable drives. If found, it parses the autorun.inf file for the executables it may run. If AutoProtect is enabled, it will automatically delete the files present on the drive.

Otherwise, it will prompt you for your permission to delete the virus. Version 2 includes unspecified updates.

Download Instructions : Click here to download

How to Download Avira Anti Virus Bootable Rescue CD for Free?

If your Windows gets infected by virus, system files gets currupted and in that case your PC does not start or gives some kind of errors. At that time you can use Rescue Bootable CD’s to scan your drives, create delete partitions and can perform many other operations.

If you use Avira Anti Virus, here is Avira Anti Virus BootableRescue CD. Just download it and burn it in CD and you can use this CD in future.


Download Instructions : Click here to download.

It is an ISO file, you can use Nero, Ultra ISO, Power ISO to burn this ISO file into CD.

List Of Top 10 Antivirus Softwares

Here is the list of Best 10 Antivirus Applications of 2009. Most of these come with following testing certifies …
ICSA Certified
VB100% Certified
W.C.L Level 1 Certified
W.C.L Level 2 Certified

10 Best Antivirus Softwares

01. Kaspersky Anti-Virus
Kaspersky Antivirus often treated as the best available Antivirus application and has a special version for file servers. It covers almost all sections needed for a top class security. Kaspersky provides hourly virus definition update to keep you up-to-date.

02. BitDefender Antivirus
BitDefender is one of the best antivirus with top class defending ability. It provides hourly definition updates for latest threats. BitDefender comes with P2P File Sharing and Registry Startup Protection but lacks Email scanning.


03. Trend Micro
Trend Micro is a well known and popular antivirus with Spyware and Adware Protection. It has some great features including Remote File Lock that safeguards your private files in case your laptop is lost or stolen. But lacks P2P File Sharing and Registry Startup Scanning.

04. Norton Antivirus/ Internet Security
Norton Antivirus is one of the most popular and well known antivirus application. The latest version has the ability to map your wireless home network and safeguards your wifi networks. Recently Norton has introduced a special version for gaming PCs known as Norton 2009 Gaming Edition. It comes with daily virus definition update but no support for P2P File Sharing and Registry Startup Protection.

05. McAfee Antivirus
McAfee is one of the leading antiviruses in security industry. McAfee introduced 2 features ScriptStopper and WormStopper. But it has no support for P2P File Sharing, Instant Messenger and Registry Startup. The inbuilt updater updates virus definitions on a regular basis to keep your up-to-date.

06. Panda Antivirus Pro 2009
Panda Antivirus comes with a new feature call UltraFast scan engine that scan almost 30% faster compared to other antivirus applications. It has few unique features as follows
Identity protection through Anti-Phishing Filter and Anti-Banking Trojans Engine
Panda Antivirus has an advanced heuristic scan which maximum possible identity theft
Inbuilt Personal Firewall

07. ZoneAlarm Anti-virus 2009
The latest version of ZoneAlarm antivirus comes with strong removal ability of most dangerous viruses and multilayer security for your PC. But it is not certified by any of the three major independent testing labs Virus Bulletic, Checkmark, or ICSA. Zone Alarm scans uses lesser possible system resources.

08. ESET NOD32 Antivirus
NOD32 is one of the leading antivirus applications with feature like …
Blocking all attempts to collect and forward your personal and confidential data
Provides best protection against zero day threat and attacks
Virus definition updates comes in very small size compared to others
Multi layered protection including real time email scanning

09. AVG Antivirus
AVG is one of oldest and widely used antivirus. Latest version of AVG comes with a clean interface and the core scanning engine changed for better performance with multi-core processors. Now the AVG Antivirus comes with two separate stand alone applications AVG Antispyware and AVG Antirootkit to give your best possible security.

10. F-Secure Antivirus 2009
F-Secure Antivirus is quite easy to use and comes with pre-defined options for known threats. F-Secure heuristic scanner is considered as one of fastest. It provides new definition update on every two hours to provide you best possible security from most latest threats. It supports emails scanning for both Outlook and Thunderbird.

Nod32 Anti Virus Not Detecting Any Keylogger?

Nod32 Anti Virus Not Detecting Any Keylogger?

 Here Is The Solution...........

If you are using Nod32 anti virus and it is not detecting any keylogger in your PC here is a solution for it.
As I have installed latest version of Nod32, so I’ll be giving screenshots of version 4.0 only.
Lets start :
Step1) Open Nod32 anti virus and click on Setup and from the drop down list select Advanced Setup or simply press F5.
Step2) In the left hand side panel, click on Antivirus and antispyware.


Step3) Now look at the right hand side panel and click Setup. Step4) Now, in the options, put a tick on Potentially Unsafe Applications and then click on OK at the bottom.

Step5) Now again the left hand side panel, look for On Demand Computer Scan and click on it.

Step6) Now, in the right hand side panel, click on drop down list and select In-depth scan.

Step7) Click on Setup beside ThreatSense engine parameter setup, here put a tick on potentially Unsafe Applications and then click on OK at the bottom.
Step8) Now again from the drop down list select context Menu Scan and repeat Step7.
Step9) Now again from the drop down list select Smart Scan and repeat Step7.
Step10) Now in the main Advanced Setup window click on OK and restart your PC.
From now your Nod32 Anti Virus will detect all key loggers and all unwanted applications.

 

How To Manually Update Avira Anti Virus ?

How To Manually Update Avira Anti Virus ?

Avira Anti Virus :

Step1) First download the updates from here.

Step2) Now open Avira Anti Virus and then go to the menu Update and select Manual Update.

Step 3) Now navigate to the downloaded IVDF file from your hard disk and click on Open.

Step 4) And you are done !

Enjoy..........

How to Download Kaspersky 2010 Beta Version?

Good news for all the beta testers, Kaspersky has recently launched Kaspersky 2010 beta and is available to download. Have a look at the screenshots below :

No need of any key, just install Kaspersky 2010 from here and you can use it as 30 days trial. I think the full version will be released after a long time. Kaspersky claims it to be the fastest virus scanner. Well, I have just downloaded this software and has not scanned any drives yet. Just give it a try and do reply here, what is your scanning experience with it!

How To Manually Update AntiVirus AVG Anti Virus v 8.0 :

Here is the solution,

All AntiVirus come up with the option to automatically update its virus signature database. But this option is for those who have Internet connection. But for those users who do not have Internet connection or your connection is temporarily disconnected here is a method to manually update virus signatures.
AVG Anti Virus v7.5 :

Step1) First download the updates from here.
Step2) Now follow the steps below :

• >> Open AVG User Interface
• >> From top menu “Tools” select “Update from directory” option
• >> Navigate to the folder where AVG update files are stored and click “OK”

How To Manually Update AntiVirus Kaspersky 5.0 Products :

Kaspersky 5.0 Products :
Step1) First download the updates from here and follow Step1 in Kaspersky 7.0 products
Kaspersky 6.0 Products :
Step1) First download the updates from here and follow Step1 in Kaspersky 7.0 products.
Kaspersky 7.0 Products :
First download the updates from here and follow the steps below :
Step1) Open Kaspersky Anti Virus
Step2) At the bottom click on Settings button.
Step3) In the left hand side panel click on Update
Step4) In the right hand side panel in the Update settings section click Configure
Step5) Go to the Update source tab
Step6) Click Add
Step7) Specify the update folder
Step8) Click OK
Step9) Clear the boxes Kaspersky Lab’s update servers on the Update source tab
Step10) Click OK
Step11) Run the update process
Step12) Perform the same actions for another folder (if necessary). For caliry have a look at the image below :

click on the image to enlarge

Note : This procedure is same for all 5.0 and 6.0 products

How To Manually Update AntiVirus McAfee Anti Virus :

McAfee Anti Virus :

First download the updates from here. After downloading the updates, just download readme.txt file beside it. All the installation instructions are given in that folder. Have a look at the image below :

How To Manually Update AntiVirus Norton Anti Virus :

Norton Anti Virus : 

  Step1) First download the updates from here.

Step2) To manually update the virus definitions, use the Intelligent Updater. Click here to read the detailed information on how to use it.

Note : There are some softwares that automatically install the downloaded updates to desired anti virus system, but I recommend users to do all the task manually. This will increase your skills

Download BitDefender Anti Virus Bootable Rescue CD Free

Last time I wrote about Avira and Kaspersky Rescue CD.
In my previous post about Avira Rescue CD I told you about what is a Rescue CD. Here is a brief into about it.

Sometimes when your Windows gets infected by virus, system files gets currupted and in that case your PC does not start or gives some kind of error. At that time you can use Rescue Bootable CD’s to scan your drives, create delete partitions and can perform many other operations.

Download Instructions : Click here to download BitDefender Anti Virus Rescue CD

10 tips for securing your PC

10 tips for securing your PC

1. Update / patch ALL your software every now and then!

2. Check / adjust ALL your settings so they are safe, since they ARENT by default!

3. Use firewall, like ZoneAlarm!

4. Use good passwords: at least 13marks long, containing both letters and numbers. Remember to chance your password every few months atleast!

5. Get good anti-virus & Spyware softwares and keep it updated!

6. Don’t open or execute files that you are not 100% sure are absolutely safe no matter where or how you get them.

7. Wipe your historyfiles (like cookies, internet history and temporary files, etc.), logs and personal files, with specific wiping program (like Eraser) instead of just deleting them.

8. Use encryption to enhance your privacy! Use encrypted email (like Hushmail or Ziplip) and encrypt sensitive files on your computer (PGP).

9. Don’t use public computers for anything you need to type in your logins, they usually have Trojan horses that capture your passwords.

10. Don’t assume anything. If you don’t know, find out! If you cant or don’t understand, ask someone who knows! There’s nothing more dangerous than doing something you don’t really know anything about. That’s the best way to cripple your system or get a Trojan horse on your computer!

Mobile Tips and Tricks for Anti virus

Mobile phone viruses, simple measures to protect yourself

The Australian Mobile Telecommunications Association (AMTA) has developed consumer tips to assist users to protect themselves against the risk of mobile phone viruses.

This guide explains what viruses are, how they spread, and what can be done about them. 

What’s a mobile phone virus?

A mobile phone virus or mobile malware - malicious mobile software - is a computer virus specifically adapted for the mobile phone environment and designed to spread from one vulnerable phone to another.

A virus is a program code that replicates by being copied to another program. Viruses can be transmitted as attachments to an email or in a download file. Some viruses take effect as soon as their code is executed; other viruses can lie dormant. A virus that replicates by resending itself as an email attachment or as a part of a network message is known as a worm.

Viruses can range from benign to quite harmful; they can erase data from the infected phone or send fake messages purporting to be from the phones owner. How prevalent are mobile phone viruses? The current security risk from mobile phone viruses and worms is low.

Until many more smart phones or PDAs are in use, and users of these phones are regularly exchanging executable files, the risk will remain low. The mobile industry takes the threat of viruses very seriously and is continually monitoring its networks and working to protect users from any future risk from mobile phone viruses. There are also some simple measures that individual users can implement to protect themselves. 

What can I do to protect my phone?

The following tips can help prevent problems with viruses on your phone: 

1. Switch to Bluetooth hidden mode. If your phone has Bluetooth capability, ensure that the Bluetooth capability is switched to hidden or invisible mode unless you specifically need it to be visible. This will help prevent other Bluetooth-enabled devices from finding your phone (unless you grant them the necessary permission) and will therefore help protect your phone from worms that spread using the Bluetooth wireless technology. 

2. Exercise caution before opening attachments. When accepting applications sent via Bluetooth, or opening MMS attachments, exercise caution, just as you would when opening an email attachment on your PC, because they may include harmful software. Ensure the application or attachment comes from a known source, and is wary of opening files that have unfamiliar text attached to them, even if they come from someone you know. 

3. Only download content from a trusted source. Trusted sources may include operator portals and other well-known brands that offer adequate protection against viruses and other harmful software. Be aware though that, as with emails, malicious or fraudulent users may be able to fake the appearance of a trusted source. 

4. Consider anti-virus software. Some software is available to prevent phone viruses. You may wish to consider downloading this software. 

5. Contact your phone manufacturer if concerned. If you think you have a virus, call the phone manufacturer’s care line. They can assist you confirm if it is a virus, and help fix the problem.

10 Must-Have apps for your USB PenDrive

Having portable apps in Pen Drive is must for computer geeks.No need to install this softwares in your PC. Just double click on them and they are ready to use.Here is the list of 10 must have portable freewares.

1. Mozilla Firefox Portable Edition

Carry the “safest browser in the world” with you, also have your extensions, bookmarks and addons ready to use any time.
Download firefox portable

2. VLC Media Player Portable

Best media player supports almost all popular media file formats. Now take it with you anywhere you go.
Download VLC player portable

3. Pidgin Portable

All-in-one instant messaging (supports AIM, ICQ, MSN Messenger, Yahoo, Gtalk, etc)
Download Pidgin Portable

4. ClamWin Antivirus Portable

If you are a tech-geek you must be already having this on your thumb drive, free professional antivirus to keep your PC safe anytime, anywhere.
Download ClamWin AntiVirus

5. Notepad++ Portable

Must have tool for programmers and developers. It’s main syntax highlighting feature makes it look different from other common text editors.
Download Notepad++ Portable

6.7-Zip Portable

Now uncompress all types of compressed files with this cool free app. This is one of the most popular freeware now made portable.
Download 7-zip Portable

7.CCleaner Portable

Free, easy to use and very useful application. Cleans scrap files from your system in few minutes. Makes you PC run faster.
Download CCleaner portable

8.Utorrent

Download torrent files from anywhere you go.Tiny bittorrent client.
Download Utorrent

9.Restoration

Recover accidentally deleted files – even after they were deleted from the recycle bin.
Download Restoration

10.Foxit Reader

Foxit Reader is a small and fast PDF viewer that is compatible with PDF Standard 1.7. It includes Javascript support, interactive form filler, annotation tools and built-in text converter.
Download Foxit Reader

10 tips for securing your PC

1. Update / patch ALL your software every now and then!

2. Check / adjust ALL your settings so they are safe, since they ARENT by default!

3. Use firewall, like ZoneAlarm!

4. Use good passwords: at least 13marks long, containing both letters and numbers. Remember to chance your password every few months atleast!

5. Get good anti-virus & Spyware softwares and keep it updated!

6. Don’t open or execute files that you are not 100% sure are absolutely safe no matter where or how you get them.

7. Wipe your historyfiles (like cookies, internet history and temporary files, etc.), logs and personal files, with specific wiping program (like Eraser) instead of just deleting them.

8. Use encryption to enhance your privacy! Use encrypted email (like Hushmail or Ziplip) and encrypt sensitive files on your computer (PGP).

9. Don’t use public computers for anything you need to type in your logins, they usually have Trojan horses that capture your passwords.

10. Don’t assume anything. If you don’t know, find out! If you cant or don’t understand, ask someone who knows! There’s nothing more dangerous than doing something you don’t really know anything about. That’s the best way to cripple your system or get a Trojan horse on your computer!

Delete Autorun.inf Virus Manually using just Winrar

Once it happened to a friend of mine, when his newly bought laptop was infected with this autorun.inf virus. This virus corrupted almost all the drives on the Hard disk, and when ever he tried to double click on the drive or opening any drive it opened in a new window. In some cases, when your drive is infected with this Autorun.inf virus, you won’t be able to access the drive completely. You have to browse the drive by Exploring it i.e; Ctrl+E keys from the keyboard.

Sometimes ever you will not be able to see hidden files even if you have Show hidden files Enabled under Folder Options. well, this are all the wonders of this Autorun.inf virus.
I am going to show you this rare method of removing Autorun.inf manually using just winrar application, not any antivirus or malware programs.
Solution to Remove Autorun.inf Virus

Step 1: First Disable CD/DVD or USB Autorun in windows

Step 2: Open Winrar.exe (Start–>All Programs–>WinRar–>WinRar.exe)

Step 3: Now Browse to any drive that is infected with Autorun.inf virus using winrar explorer.

Step4: Here you will see all the hidden files under winrar for that particular drive.

Step 5: Look for the file Autorun.inf and open it using notepad.

Step 6: In that Autorun file, some .EXE file will be mentioned that will be executed along with the autorun file. This exe file is the main culprit.

Step 7: Note the exe file mentioned in the Autorun.inf file. Close this Autorun.inf file.
Step 8: Now look for that .Exe file in the drive (Ex: c:/), Delete that .exe file along with Autorun.inf
Step 9: Restart your Operating System. Now your system is free with Autorun.inf Virus.
Note: Repeat the same process if your Usb or Pendrives are infected with Autorun.inf virus.
If you know anyother method to remove autorun virus from windows operating system, them kindly let me know by posting your method using the Comments on this post.