Unable to remove worm/virus from external drive

Closed
badmanju1988 Posts 1 Registration date Tuesday February 25, 2014 Status Member Last seen February 25, 2014 - Feb 25, 2014 at 10:30 AM
carminabigue Posts 620 Registration date Tuesday March 19, 2013 Status Member Last seen June 10, 2015 - Feb 25, 2014 at 11:52 AM
Hello ive been having problem with a worm/virus named "format.vbs" i tried AVG, Avast, ESET, McAfee and norton, also used malwarebytes,ccleaner and spybot search & destroy... but all they seem to do is find it, quarantine it but it comes back again, the worm/virus hides everything in my external drive then creates 1kb shortcuts. how can i get rid of it?

btw, i tried unhiding my folder but as i am logged in as admin already it doesnt allow me to unhide them, the "hidden" check/tick box is greyed out. please help tried attrib command as well.
Related:

1 response

carminabigue Posts 620 Registration date Tuesday March 19, 2013 Status Member Last seen June 10, 2015 125
Feb 25, 2014 at 11:52 AM
Hello,

Try this 1.

Check whether the files are not in hidden mode. Follow the following steps.

Step 1:

Click on the below link and download the file "AutorunExterminator"

https://ccm.net/downloads/security-and-maintenance/5911-autorun-exterminator/

Extract it --> Double-click on "AutorunExterminator" --> Plug your External

hard drive now.

This will remove the autorun.inf files from your External hard drive and also from

the drives.

Step 2:

Click on "Start" -->Run --> type cmd and click on OK.

Here I assume your External hard drive as G:

Enter this command.

attrib -h -r -s /s /d g:\*.*

You can copy the above command --> Right-click in the Command Prompt and

paste it.

Note : Replace the letter g with your External hard drive letter.

Now check for your files in External Drive.

Step 3:

After that, download the Malwarebytes' Anti-Malware from the below link

https://ccm.net/downloads/security-and-maintenance/4621-malwarebytes-anti-malware/

Update it --> Perform "Full Scan"

Note : Default selected option is "Quick Scan".

Good Luck.

Regards!
0