Format (erase) USB flash drive infected with Win32.Virut.Q
Page 1 of 2
Page 1 of 2 • 1, 2
- Master NedNovice
-
OS : Windows XP SP3
Posts : 6
Rubies : 3362
Likes : 0
My flash drive was infected with Win 32.Virut.Q. I tried to format it on some computer but I was unable to do it because the virus started to spread the very second I plugged the flash into the computer and since it was working, I got the message informing me that some other program was using the flash and that it couldn't be formatted. It seems that the only thing I can do is to toss my flash and buy another one. Is there any solution to this problem? I tried to format it from DOS but DOS doesn't recognize flash USB drive. Please help.
Thanks in advance.
Thanks in advance.
- BelahzurSite Admin
-
OS : 7 Home Premium x64
Posts : 34948
Rubies : 218221
Likes : 18
Hello.
Before we do anything, are you willing to format your machine too? without backing up any EXE or SCR files? or any zip files containing EXE/SCR files?
Before we do anything, are you willing to format your machine too? without backing up any EXE or SCR files? or any zip files containing EXE/SCR files?
Site Admin / Security Administrator
[Prework] - Please PM me if I fail to respond within 24hrs.


- Master NedNovice
-
OS : Windows XP SP3
Posts : 6
Rubies : 3362
Likes : 0
My flash wasn't infected on my computer. My computer works fine and I have no problems with it whatsoever (I have Zone Alarm Security Suite installed on it). I was helping my friend whose computer had been infected with the virus (I used my flash to give him some files). My flash was plugged into his computer for half an hour or so. But, after that, I didn't plug the flash into my computer because I suspected that it was infected with this virus.
- BelahzurSite Admin
-
OS : 7 Home Premium x64
Posts : 34948
Rubies : 218221
Likes : 18
Well don't plug the flash drive into your machine, we HAVE to use your friends machine to sacrifice. Virut is a file infector, there's nothing anyone can do against Virut.
Site Admin / Security Administrator
[Prework] - Please PM me if I fail to respond within 24hrs.


- Master NedNovice
-
OS : Windows XP SP3
Posts : 6
Rubies : 3362
Likes : 0
OK. Please tell me what to do...
- BelahzurSite Admin
-
OS : 7 Home Premium x64
Posts : 34948
Rubies : 218221
Likes : 18
I need to know what OS they are using first.
We are gonna use Combofix, but if this machine is Vista, we have to run Combofix a certain way.
We are gonna use Combofix, but if this machine is Vista, we have to run Combofix a certain way.

Site Admin / Security Administrator
[Prework] - Please PM me if I fail to respond within 24hrs.


- Master NedNovice
-
OS : Windows XP SP3
Posts : 6
Rubies : 3362
Likes : 0
No, he is using XP SP2 or SP3 (I am not sure, but I will check it out and let you know)
- BelahzurSite Admin
-
OS : 7 Home Premium x64
Posts : 34948
Rubies : 218221
Likes : 18
Okay, before you run this tool, please close down all protection programs, right click their icon in the tray and exit them.
Please make sure your stick is plugged in while you run this.
Please make sure your stick is plugged in while you run this.
- Download combofix from here combofix.exe
- Please disable your local AV (Anti-virus) by right clicking it's icon in the tray, and exit it. See HERE for how to disable your AV.
- Double click on ComboFix.exe.
- Follow the prompts. NOTE:
- ComboFix will check to see if the Microsoft Windows Recovery Console is installed.
***It's strongly recommended to have the Recovery Console installed before doing any malware removal.***
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will automatically proceed with its scan. - The Recovery Console provides a recovery/repair mode should a problem occur during a Combofix run.
- Allow ComboFix to download the Recovery Console.
- Accept the End-User License Agreement.
- The Recovery Console will be installed.
- You will then get this next prompt that asks if you want to continue the malware scan, select yes
- Allow combofix to run
- Post C:\combofix.txt back here.
Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
Site Admin / Security Administrator
[Prework] - Please PM me if I fail to respond within 24hrs.


- Master NedNovice
-
OS : Windows XP SP3
Posts : 6
Rubies : 3362
Likes : 0
Thank you. I will try it. Could you please explain: "Post C:\combofix.txt back here."? Where should I place combofix.txt?
- BelahzurSite Admin
-
OS : 7 Home Premium x64
Posts : 34948
Rubies : 218221
Likes : 18
The report is a notepad file, so just open it and the report inside.
Copy and paste the report back here.
Copy and paste the report back here.
Site Admin / Security Administrator
[Prework] - Please PM me if I fail to respond within 24hrs.


Page 1 of 2 • 1, 2
Similar topics
Create an account or log in to leave a reply
You need to be a member in order to leave a reply.
Page 1 of 2
Permissions in this forum:
You cannot reply to topics in this forum