Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: USB Flash full of viruses! What do I do?

23 Mar 2010   #11
Little Darwin

Windows 7 Home Premium (64 bit)
 
 

Isn't it possible to disable autorun, or did this disappear with Windows 7?

If it is still there, don't you just disable it, and scan with whatever scanner you have?

Surely there must be a setting somewhere to ensure that a USB can't be plugged in by a sociopath and automatically infect a library system.


My System SpecsSystem Spec
.
23 Mar 2010   #12
EnemyWithin

Windows 7 Ultimate x64
 
 

I came across a tool "USB Vaccin" which not only stops the autorun and the spreading of the infection, but also prevents your thumb drive from getting some very common infections while using it at work or on a friend's computer: It creates a set of hidden, read-only folders with the following name scheme : malware_name.extension.
Among the created folders :
Autorun.exe
Adobe.exe
Adober.exe
svchost.exe ....

To distinguish these legitimate folders from actual malwares; hover the mouse and a the description popup will show you that they all contain the same text file (a description file).

Scanning a vaccin-ed drive will report as clean, the software itself (USB Vaccin) is being detected (falsely) as some sort of trojan dropper.

If the moderators agree, I'll post it here as a zip archive

Source : Infections par supports amovibles - Forums Zebulon.fr (French forum, use google translate)
My System SpecsSystem Spec
23 Mar 2010   #13
Product FRED

Windows 7 Enterprise 64-bit
 
 

Just use Sandboxie to isolate it and keep it from spreading and +1 for Panda.
My System SpecsSystem Spec
.

23 Mar 2010   #14
whs
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8
 
 

Quote   Quote: Originally Posted by Little Darwin View Post
Isn't it possible to disable autorun, or did this disappear with Windows 7?

If it is still there, don't you just disable it, and scan with whatever scanner you have?

Surely there must be a setting somewhere to ensure that a USB can't be plugged in by a sociopath and automatically infect a library system.
Sure, you can disable autoplay in Control Panel\Hardware and Sound\AutoPlay
My System SpecsSystem Spec
23 Mar 2010   #15
Victek

Windows 7 x64
 
 

Quote   Quote: Originally Posted by whs View Post
Quote   Quote: Originally Posted by Little Darwin View Post
Isn't it possible to disable autorun, or did this disappear with Windows 7?

If it is still there, don't you just disable it, and scan with whatever scanner you have?

Surely there must be a setting somewhere to ensure that a USB can't be plugged in by a sociopath and automatically infect a library system.
Sure, you can disable autoplay in Control Panel\Hardware and Sound\AutoPlay
.
I've read that Auto-Play and Auto-Run are not exactly the same thing. Are you sure that disabling Auto-Play in the Control Panel prevents the autorun.inf file on a USB drive from running?
My System SpecsSystem Spec
23 Mar 2010   #16
Product FRED

Windows 7 Enterprise 64-bit
 
 

Quote:
Until the introduction of Windows XP, the terms AutoRun and AutoPlay were used interchangeably, developers often using the former term and end users the latter. This tendency is reflected in Windows Policy settings named AutoPlay that change Windows Registry entries named AutoRun, and in the autorun.inf file which causes "AutoPlay" to be added to drives’ context menus. The terminology was of little importance until the arrival of Windows XP and its addition of a new feature to assist users in selecting appropriate actions when new media and devices were detected. This new feature was called AutoPlay and a differentiation between the two terms was created.[1]
Quote:
AutoPlay is a feature introduced in Windows XP which examines removable media and devices and, based on content such as pictures, music or video files, launches an appropriate application to play or display the content.[1] If available, settings in an autorun.inf file can add to the options presented to the user.
Just use the Panda USB Anti-Virus tool and it'll do everything for you.
My System SpecsSystem Spec
23 Mar 2010   #17
The Blessed One

 

Thanks for the Panda USB Vaccine, it worked great. I had heard of this software but didn't realise it could be so useful!

I was a bit worried at first though as the vaccine disabled autorun, but when I connected the USB flash, the 'AutoPlay' pop-up appeared asking me what to do. This must be different to the 'AutoRun'? Anyway I used Avast 5 free to scan the flash and indeed there two worms in there! The threat level was classed as 'High'. Avast just wiped them out with ease as usual. This new version 5 is a great antivirus!
My System SpecsSystem Spec
23 Mar 2010   #18
whs
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8
 
 

Quote   Quote: Originally Posted by The Blessed One View Post
Thanks for the Panda USB Vaccine, it worked great. I had heard of this software but didn't realise it could be so useful!

I was a bit worried at first though as the vaccine disabled autorun, but when I connected the USB flash, the 'AutoPlay' pop-up appeared asking me what to do. This must be different to the 'AutoRun'? Anyway I used Avast 5 free to scan the flash and indeed there two worms in there! The threat level was classed as 'High'. Avast just wiped them out with ease as usual. This new version 5 is a great antivirus!
May I suggest that you scan this stick with some more scanners. As good as Avast may be, it could have missed some. Superantispyware and Malwarebytes come to mind. And if you want to be really thorough, send the files here: VirusTotal - Free Online Virus and Malware Scan
My System SpecsSystem Spec
Reply

 USB Flash full of viruses! What do I do?





Please note  Please note
        When your issue is fixed please remember to thank those that helped you and mark the thread as solved.
Thread Tools




Similar help and support threads
Thread Forum
usb flash drive full
hi guys i just deleted the files on my flash usb drive but says its still full. says folder empty. but i only have 7.18mb free of 4gb. can someone help me thanx matt
Hardware & Devices
How to prevent usb flash drive viruses?
I was wondering what I can do to prevent my usb flash drive from geting infected when i connect it to say school computers or a friends computer since I dont trust them as much. I searched a bit on google but would like to know what you guys do to prevent these malicious content from infecting your...
System Security
Start bar always on top in full screen flash applications
hi, im using windows 7 64 bit - I have a very annoying issue when using certain applications in full screen, the windows taskbar stays on top --- I think its something to do with flash because I remember it only started happening after installing a new version (some time back, maybe it was a beta I...
Customization
Flash player exiting full screen randomly
Hi i have this annoying problem with flash player that i never used to have back on flash 9 something, Seems any build of flash from 10.1 to 10.3 all keep exiting full screen on there own when watching video. It happens on 2 computers of mine, both running windows 7 and both home built with...
Browsers & Mail
flash full screen low fps! ??
Help, when I put fullscreen anykind of flash video like megavideo or videobb or others, fps rate is really low! I have disabled any windows visual effect and have tried on IE, Firefox and Opera and the problem is still the same. Cpu never goes above 40% so it is not performances problem... what is...
Music, Pictures & Video
non-interactive kiosk, force full screen flash
I'm setting up a digital sign/non-interactive kiosk for a elementary school which will show the kids how much power the photovoltaic array is creating. Because the computer/keyboard/mouse will be locked up I don't have as many security issues as an interactive kiosk. I've added the Adobe Flash...
Performance & Maintenance


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 14:22.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App