Previous Topic Next Topic

Surabaya virus and regedit value resetting!!!

Closed
littlevietdavid Posts 2 Registration date Monday 29 March 2010 Status Member Last seen 29 March 2010 - 29 Mar 2010 à 15:37
Ambucias Posts 47312 Registration date Monday 1 February 2010 Status Moderator Last seen 28 March 2026 - 30 Mar 2010 à 03:56
I have the surabaya virus and I have done every possible advice to attempt to delete and nothing seems to work. I went into cmd to delete autorun.inf using the attrib and it does not delete.

When I try to edit the regedit to delete LegalNoticeCaption and LegalNoticeText, they just come back after deletion.

Please help because this virus is really annoying!

Related:

1 response

Réponse 1 / 1
Ambucias Posts 47312 Registration date Monday 1 February 2010 Status Moderator Last seen 28 March 2026 11,166
29 Mar 2010 à 17:26
Hello LittleViet,

It is unfortunate that you did not fully explain all the steps you have gone through.

However, I shall repeat the procedure here and you can tell if this is what you did. Perhaps that you missed a step?

Step 1:
Press Start -> Run -> cmd (or command) -> press Enter
Type in command box- cd\
Type again in command box- c:
Type again in command box- attrib -s -h -r /d /s -> press Enter
Type again in command box- del autorun.inf -> press Enter
Type again in command box- del thumb*.* -> press Enter

Repeat the same with your other hard drive partitions as well...say if you have 3 drive partitions viz. C, D & Efor this:

Type again in command box- d:
Type again in command box- attrib -s -h -r /d /s -> press Enter
Type again in command box- del autorun.inf -> press Enter
Type again in command box- del thumb*.* -> press Enter
Type again in command box- e:
Type again in command box- attrib -s -h -r /d /s -> press Enter
Type again in command box- del autorun.inf -> press Enter
Type again in command box- del thumb*.* -> press Enter

If you have any USB hard drive on pen drive connected, do the above procedure with its drive name. For example if your USB drive name is G

Type again in command box- g:
Type again in command box- attrib -s -h -r /d /s -> press Enter
Type again in command box- del autorun.inf -> press Enter
Type again in command box- del thumb*.* -> press Enter
Type again in command box- exit

Type again, type again, that is a lot of typing I have done.

I would appreciate your feedback

Sincerely
littlevietdavid Posts 2 Registration date Monday 29 March 2010 Status Member Last seen 29 March 2010
29 Mar 2010 à 21:53
I have been attempting to do this process, but for some reason the autorun still exists...and sometimes when I input attrib -s -h -r /d /s into the command it says "Access denied" and lists specific files.
Ambucias Posts 47312 Registration date Monday 1 February 2010 Status Moderator Last seen 28 March 2026 11,166
30 Mar 2010 à 03:56
Try creating another account and then attempt to access the files.

Similar discussions

Shortcut & .lnk virus on usb and phone keep reappearing HELP!!
jinxedtech -
canewell05 -

14 responses
Using attrib -h -r -s /s /d g:\*.* I could not wipe the attributes of my externa
jwtingley -
ac3mark -

1 response
attrib -h -r -s /s /d g:\*.* did not work for me
johnmenard -
Ambucias -

1 response
uuuuuuuuuu.uuu virus
raj -
gato62 -

18 responses
HARD DRIVE INFECTED BY $RECYCLE.BIN VIRUS AND LOST FILES A LOT.
ArefSutekii -
xpcman -

1 response