Previous Topic Next Topic

Surabaya virus and regedit value resetting!!!

Closed
littlevietdavid Posts 2 Registration date Monday March 29, 2010 Status Member Last seen March 29, 2010 - Mar 29, 2010 at 03:37 PM
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 - Mar 30, 2010 at 03:56 AM
I have the surabaya virus and I have done every possible advice to attempt to delete and nothing seems to work. I went into cmd to delete autorun.inf using the attrib and it does not delete.

When I try to edit the regedit to delete LegalNoticeCaption and LegalNoticeText, they just come back after deletion.

Please help because this virus is really annoying!

Related:

1 response

Answer 1 / 1
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,166
Mar 29, 2010 at 05:26 PM
Hello LittleViet,

It is unfortunate that you did not fully explain all the steps you have gone through.

However, I shall repeat the procedure here and you can tell if this is what you did. Perhaps that you missed a step?

Step 1:
Press Start -> Run -> cmd (or command) -> press Enter
Type in command box- cd\
Type again in command box- c:
Type again in command box- attrib -s -h -r /d /s -> press Enter
Type again in command box- del autorun.inf -> press Enter
Type again in command box- del thumb*.* -> press Enter

Repeat the same with your other hard drive partitions as well...say if you have 3 drive partitions viz. C, D & Efor this:

Type again in command box- d:
Type again in command box- attrib -s -h -r /d /s -> press Enter
Type again in command box- del autorun.inf -> press Enter
Type again in command box- del thumb*.* -> press Enter
Type again in command box- e:
Type again in command box- attrib -s -h -r /d /s -> press Enter
Type again in command box- del autorun.inf -> press Enter
Type again in command box- del thumb*.* -> press Enter

If you have any USB hard drive on pen drive connected, do the above procedure with its drive name. For example if your USB drive name is G

Type again in command box- g:
Type again in command box- attrib -s -h -r /d /s -> press Enter
Type again in command box- del autorun.inf -> press Enter
Type again in command box- del thumb*.* -> press Enter
Type again in command box- exit

Type again, type again, that is a lot of typing I have done.

I would appreciate your feedback

Sincerely
littlevietdavid Posts 2 Registration date Monday March 29, 2010 Status Member Last seen March 29, 2010
Mar 29, 2010 at 09:53 PM
I have been attempting to do this process, but for some reason the autorun still exists...and sometimes when I input attrib -s -h -r /d /s into the command it says "Access denied" and lists specific files.
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,166
Mar 30, 2010 at 03:56 AM
Try creating another account and then attempt to access the files.

Similar discussions

Using attrib -h -r -s /s /d g:\*.* I could not wipe the attributes of my externa
jwtingley -
ac3mark -

1 response
attrib -h -r -s /s /d g:\*.* did not work for me
johnmenard -
Ambucias -

1 response
Access Denied Attrib Functions
grwilso2 -
Promomilia -

2 responses
attrib -h -r -s /s /d g:\*.* -->
Prabhanjan -
KY_WD -

1 response
uuuuuuuu.uuu SD card virus problem
pravin -
xpcman -

1 response