Question

Locked

Flash Drive Problem

By SystemCheck ·
Okay here is the problem as of Monday, on every computer I place my 16gb or my 8gb usb flash drive in the computer, in my computer it looks like a folder with a drive letter instead of a removable drive icon. Everywhere else it looks fine (disk management, device manager. If i were to format the drive, then i goes back to normal, but then reverts back to a folder, does this on multiple computers and multiple flash drives, i have even tried to update drivers with fail. please help, it's annoying the **** out of me

This conversation is currently closed to new comments.

10 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

What is your question?

by SPC_TCOL In reply to Flash Drive Problem

Ok what do you want?
That it looks like a folder, or that it has a drive letter?

And what are the other computers?

Collapse -

update

by SystemCheck In reply to What is your question?

k just noticed that it had some kind of virus on it, i removed it now i cant open it gives error and bunch of numbers

Collapse -

again

by SPC_TCOL In reply to update

what would you like to do with it?
Please tell us first what you would like to do. Because I am not sure what you are asking for.

Collapse -

You may have infected several Systems

by Jacky Howe In reply to Flash Drive Problem

Open a Command Prompt by pressing the WinKey + r and then typing <b>cmd</b> in the run box. At the command prompt type the (drive letter): and press Enter.

drive letter is the drive letter that you are connecting to.

type dir /ah and press Enter.

This will display a list of the Hidden files on the Drive. Check whether the following file is there Autorun.inf and also look for suspicious .exe files.

If the file is there

type notepad autorun.inf and press Enter.

Save the file to another location with an extension .txt as this will contain the executable file that is being invoked.

Type attrib -h -r -s (drive letter)autorun.inf and press Enter.

Type del (drive letter)autorun.inf


To remove the files from the Registry and the Locations that they are invoked from follow these instructions.

Tip! The executable file will be named in the file that you previously saved with Notepad.


Press the WinKey + r and type in <b>msconfig</b> and press Enter. Click on the startup Tab.

Check the list to find the file that you are looking for, expand the <u>Location</u> column to see where it is loading from in the registry.

Press the WinKey + r and type in <b>regedt32</b> and click OK. Browse to the key listed in the <u>Location</u> column for Msconfig.

Delete the key on the right hand side only, that specifically matches that startup file.

Note the <b>Command</b> folder in msconfig. Browse to the folder, and delete the .exe file.

:::::eXample:::::

The Startup TAB of Msconfig will show you the directory where pop.exe loads from:

<b>Command</b> c:\Windows\system32\pop.exe

and

<u>Location</u> will guide you to it's location in the Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

With the registry editor open find the Run key in the left window. On the right hand pane you'll see each file that is in the Run key, pop.exe will be there. Right click and Delete the entry for pop.exe.

Browse to the c:\Windows\system32 folder, and select the pop.exe file, hold down the Shift Key and press the Del Key.

Repeat these steps for each item that you want to remove.

That should remove the infection but just to be sure try this.

Follow the steps below with the System started and restarted in Safe Mode with Networking. Running in Safe Mode loads a minimal set of drivers for the Operating System. You can use these options to start Windows so that you can modify the registry or load or remove drivers. If you can access the Internet use it to download and install the files.

If you can't access the internet to update MBAM try the instructions below to clear a path to the internet to be able to run MBAM. You can also download the updates for MBAM and run them from the USB.

From another System download and install Spybot, update it and copy the the installed folders to a USB Stick. Copy MBAM and the Update as well.

With the new strains of Virus that have been created you may find it necessary to rename the executable files so that they will work. Rename mbam-setup.exe and then navigate to the install folder and rename mbam.exe. Do not change the files extension from .exe. Do the same with Spybot.

Removing malware from System Restore points:

When your infected with any trojans, spyware, malware, they could have been saved in System Restore and can re-infect you. It's best to remove them.

XP
Press the WinKey + r type sysdm.cpl and press Enter.
Select the System Restore tab and check "Turn off System Restore".


Vista
Press the WinKey + r type sysdm.cpl and press Enter
Select the System Protection tab. Untick the box next to Local Disk C: and any other drives and click on Turn System Restore off.


After scanning the system and removing the offending malware, re-enable System Restore by repeating the steps, this time removing the check from "Turn off System Restore".
When all is clear you may need to tidy up the Registry. Link is at the bottom.


Once you have restarted the Infected System in Safe Mode, navigate to the USB stick and run Spybot.

Download Spybot - Search & Destroy and install it. Update it. http://www.safer-networking.org/en/download/index.html

When you first start Spybot, click on the Mode menu and select Advanced mode. Under the Tools options (bottom left) select View Report. On the screen in the right hand pane, select View report to create a new report. Save the report as it may come in handy later. Spybot will also keep log files in this location in Vista:

C:\ProgramData\Spybot - Search & Destroy\Logs

Spybot will also keep saved log files in this location in XP:

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs


Download Malwarebytes Anti-Malware, install it and update it.

<a href="http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe" target="_blank"><u>Malwarebytes</u></a>

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform Quick Scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.

If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
<a href="http://malwarebytes.gt500.org/" target="_blank"><u>mbam-rules</u></a>

I would keep scanning with it until it is clean by closing out and rebooting and running it again.

Run this Rootkit Revealer GMer
<a href="http://www.gmer.net/index.php" target="_blank"><u>Gmer</u></a>

FAQ
<a href="http://www.gmer.net/faq.php" target="_blank"><u>FAQ</u></a>

Collapse -

perfect

by SystemCheck In reply to You may have infected sev ...

that got rid of the autorun.inf virus now how do i get rid of the


H:\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx: Worm.Downadup-77 FOUND

its in the same drive, my work gave it to me yay

Collapse -

Try this removal tool

by Jacky Howe In reply to perfect

http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-011316-0247-99

Collapse -

You could try this

by Jacky Howe In reply to perfect

1. Restart to a command prompt.
2. Type attrib -s -h H:\RECYCLER.
3. Type del H:\RECYCLER.
4. Restart the computers.

Collapse -

What was the outcome?

by Jacky Howe In reply to perfect

Was any of this helpful?

Collapse -

possible infection of flash drive

by ismail.magued In reply to Flash Drive Problem

hello I am Ismail
you might think about checking your flash drives for an infection. Flash drives that are infected tend to act up.
check your flash drive and your computer for viruses

Back to Hardware Forum
10 total posts (Page 1 of 1)  

Related Discussions

Related Forums