Format (erase) USB flash drive infected with Win32.Virut.Q

View previous topic View next topic Go down

Solved Format (erase) USB flash drive infected with Win32.Virut.Q

Post by Master Ned on Sat Feb 07, 2009 9:33 pm

My flash drive was infected with Win 32.Virut.Q. I tried to format it on some computer but I was unable to do it because the virus started to spread the very second I plugged the flash into the computer and since it was working, I got the message informing me that some other program was using the flash and that it couldn't be formatted. It seems that the only thing I can do is to toss my flash and buy another one. Is there any solution to this problem? I tried to format it from DOS but DOS doesn't recognize flash USB drive. Please help.

Thanks in advance.

Master Ned
Novice
Novice

Status :
Online
Offline

Posts : 6
Joined : 2009-02-07
OS : Windows XP SP3

View user profile

Back to top Go down

Solved Re: Format (erase) USB flash drive infected with Win32.Virut.Q

Post by Belahzur on Sat Feb 07, 2009 9:42 pm

Hello.
Before we do anything, are you willing to format your machine too? without backing up any EXE or SCR files? or any zip files containing EXE/SCR files?


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Status :
Online
Offline

Posts : 34916
Joined : 2008-08-03
Gender : Male
OS : XP SP3 Media Centre

View user profile

Back to top Go down

Solved Re: Format (erase) USB flash drive infected with Win32.Virut.Q

Post by Master Ned on Sun Feb 08, 2009 11:18 am

My flash wasn't infected on my computer. My computer works fine and I have no problems with it whatsoever (I have Zone Alarm Security Suite installed on it). I was helping my friend whose computer had been infected with the virus (I used my flash to give him some files). My flash was plugged into his computer for half an hour or so. But, after that, I didn't plug the flash into my computer because I suspected that it was infected with this virus.

Master Ned
Novice
Novice

Status :
Online
Offline

Posts : 6
Joined : 2009-02-07
OS : Windows XP SP3

View user profile

Back to top Go down

Solved Re: Format (erase) USB flash drive infected with Win32.Virut.Q

Post by Belahzur on Sun Feb 08, 2009 3:20 pm

Well don't plug the flash drive into your machine, we HAVE to use your friends machine to sacrifice. Virut is a file infector, there's nothing anyone can do against Virut.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Status :
Online
Offline

Posts : 34916
Joined : 2008-08-03
Gender : Male
OS : XP SP3 Media Centre

View user profile

Back to top Go down

Solved Re: Format (erase) USB flash drive infected with Win32.Virut.Q

Post by Master Ned on Sun Feb 08, 2009 11:41 pm

OK. Please tell me what to do...

Master Ned
Novice
Novice

Status :
Online
Offline

Posts : 6
Joined : 2009-02-07
OS : Windows XP SP3

View user profile

Back to top Go down

Solved Re: Format (erase) USB flash drive infected with Win32.Virut.Q

Post by Belahzur on Sun Feb 08, 2009 11:44 pm

I need to know what OS they are using first.
We are gonna use Combofix, but if this machine is Vista, we have to run Combofix a certain way. Wink


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Status :
Online
Offline

Posts : 34916
Joined : 2008-08-03
Gender : Male
OS : XP SP3 Media Centre

View user profile

Back to top Go down

Solved Re: Format (erase) USB flash drive infected with Win32.Virut.Q

Post by Master Ned on Mon Feb 09, 2009 10:14 am

No, he is using XP SP2 or SP3 (I am not sure, but I will check it out and let you know)

Master Ned
Novice
Novice

Status :
Online
Offline

Posts : 6
Joined : 2009-02-07
OS : Windows XP SP3

View user profile

Back to top Go down

Solved Re: Format (erase) USB flash drive infected with Win32.Virut.Q

Post by Belahzur on Mon Feb 09, 2009 2:35 pm

Okay, before you run this tool, please close down all protection programs, right click their icon in the tray and exit them.
Please make sure your stick is plugged in while you run this.


  • Download combofix from here [You must be registered and logged in to see this link.]
  • Please disable your local AV (Anti-virus) by right clicking it's icon in the tray, and exit it. See [You must be registered and logged in to see this link.] for how to disable your AV.
  • Double click on ComboFix.exe.
  • Follow the prompts. NOTE:
  • ComboFix will check to see if the Microsoft Windows Recovery Console is installed.
    ***It's strongly recommended to have the Recovery Console installed before doing any malware removal.***

    **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will automatically proceed with its scan.


  • The Recovery Console provides a recovery/repair mode should a problem occur during a Combofix run.



  • Allow ComboFix to download the Recovery Console.
  • Accept the End-User License Agreement.
  • The Recovery Console will be installed.
  • You will then get this next prompt that asks if you want to continue the malware scan, select yes



  • Allow combofix to run
  • Post C:\combofix.txt back here.

    Note:
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Status :
Online
Offline

Posts : 34916
Joined : 2008-08-03
Gender : Male
OS : XP SP3 Media Centre

View user profile

Back to top Go down

Solved Re: Format (erase) USB flash drive infected with Win32.Virut.Q

Post by Master Ned on Mon Feb 09, 2009 7:52 pm

Thank you. I will try it. Could you please explain: "Post C:\combofix.txt back here."? Where should I place combofix.txt?

Master Ned
Novice
Novice

Status :
Online
Offline

Posts : 6
Joined : 2009-02-07
OS : Windows XP SP3

View user profile

Back to top Go down

Solved Re: Format (erase) USB flash drive infected with Win32.Virut.Q

Post by Belahzur on Mon Feb 09, 2009 8:14 pm

The report is a notepad file, so just open it and the report inside.
Copy and paste the report back here.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Status :
Online
Offline

Posts : 34916
Joined : 2008-08-03
Gender : Male
OS : XP SP3 Media Centre

View user profile

Back to top Go down

Solved Re: Format (erase) USB flash drive infected with Win32.Virut.Q

Post by Master Ned on Tue Feb 10, 2009 9:37 pm

OK. I will. Thanks for everything.

Master Ned
Novice
Novice

Status :
Online
Offline

Posts : 6
Joined : 2009-02-07
OS : Windows XP SP3

View user profile

Back to top Go down

Solved Re: Format (erase) USB flash drive infected with Win32.Virut.Q

Post by Doctor Inferno on Mon Jul 06, 2009 3:22 am

Since this issue has been addressed, a "solved" tag will be added and this topic will be closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter.

Everyone else, please open a [You must be registered and logged in to see this link.] for your questions.


Please be a GeekPolice fan on [You must be registered and logged in to see this link.]



Have we helped you? [You must be registered and logged in to see this link.] | Doctor by day, ninja by night.

Doctor Inferno
Administrator
Administrator

Status :
Online
Offline

Posts : 12017
Joined : 2007-12-26
Gender : Male
OS : Windows 7 Home Premium and Ultimate X64

View user profile

Back to top Go down

Solved Re: Format (erase) USB flash drive infected with Win32.Virut.Q

Post by Doctor Inferno on Mon Jul 06, 2009 3:23 am

Since this issue has been addressed, a "solved" tag will be added and this topic will be closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter.

Everyone else, please open a [You must be registered and logged in to see this link.] for your questions.


Please be a GeekPolice fan on [You must be registered and logged in to see this link.]



Have we helped you? [You must be registered and logged in to see this link.] | Doctor by day, ninja by night.

Doctor Inferno
Administrator
Administrator

Status :
Online
Offline

Posts : 12017
Joined : 2007-12-26
Gender : Male
OS : Windows 7 Home Premium and Ultimate X64

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum