Surabaya virus and regedit value resetting!!!

Closed
littlevietdavid Posts 2 Registration date Monday March 29, 2010 Status Member Last seen March 29, 2010 - Mar 29, 2010 at 03:37 PM
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 - Mar 30, 2010 at 03:56 AM
I have the surabaya virus and I have done every possible advice to attempt to delete and nothing seems to work. I went into cmd to delete autorun.inf using the attrib and it does not delete.

When I try to edit the regedit to delete LegalNoticeCaption and LegalNoticeText, they just come back after deletion.

Please help because this virus is really annoying!

Related:

1 response

Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162
Mar 29, 2010 at 05:26 PM
Hello LittleViet,

It is unfortunate that you did not fully explain all the steps you have gone through.

However, I shall repeat the procedure here and you can tell if this is what you did. Perhaps that you missed a step?

Step 1:
Press Start -> Run -> cmd (or command) -> press Enter
Type in command box- cd\
Type again in command box- c:
Type again in command box- attrib -s -h -r /d /s -> press Enter
Type again in command box- del autorun.inf -> press Enter
Type again in command box- del thumb*.* -> press Enter

Repeat the same with your other hard drive partitions as well...say if you have 3 drive partitions viz. C, D & Efor this:

Type again in command box- d:
Type again in command box- attrib -s -h -r /d /s -> press Enter
Type again in command box- del autorun.inf -> press Enter
Type again in command box- del thumb*.* -> press Enter
Type again in command box- e:
Type again in command box- attrib -s -h -r /d /s -> press Enter
Type again in command box- del autorun.inf -> press Enter
Type again in command box- del thumb*.* -> press Enter

If you have any USB hard drive on pen drive connected, do the above procedure with its drive name. For example if your USB drive name is G

Type again in command box- g:
Type again in command box- attrib -s -h -r /d /s -> press Enter
Type again in command box- del autorun.inf -> press Enter
Type again in command box- del thumb*.* -> press Enter
Type again in command box- exit

Type again, type again, that is a lot of typing I have done.

I would appreciate your feedback

Sincerely
0
littlevietdavid Posts 2 Registration date Monday March 29, 2010 Status Member Last seen March 29, 2010
Mar 29, 2010 at 09:53 PM
I have been attempting to do this process, but for some reason the autorun still exists...and sometimes when I input attrib -s -h -r /d /s into the command it says "Access denied" and lists specific files.
0
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,162
Mar 30, 2010 at 03:56 AM
Try creating another account and then attempt to access the files.
0