Virus affecting USB Jump Drives

Is anyone aware of a virus that affects USB Jump Drives? About Two weeks ago, a friend of mine plugged a new USB drive into his computer which worked fine. Then when he tried to stop the drive to remove it, the drive would not stop. He reboots and tries the drive again. This time the autoplay feature stopped functioning and the only to access the drive was to use the explore menu. He tried another drive (#2) which worked fine in the past and the drive showed the same symtoms. He tried drive (#2) on another computer which worked fine with drives, and immediately the computer began displaying the same symtoms. It just so happed that if any drive is used on an infected machine, and taken to a different computer, that computer would immediately display the symtoms. Within two weeks, eight computers have been affected by this condition.

Have anyone experienced this?

Find more posts tagged with

Comments

husky

Is anyone aware of a virus that affects USB Jump Drives? About Two weeks ago, a friend of mine plugged a new USB drive into his computer which worked fine. Then when he tried to stop the drive to remove it, the drive would not stop. He reboots and tries the drive again. This time the autoplay feature stopped functioning and the only to access the drive was to use the explore menu. He tried another drive (#2) which worked fine in the past and the drive showed the same symtoms. He tried drive (#2) on another computer which worked fine with drives, and immediately the computer began displaying the same symtoms. It just so happed that if any drive is used on an infected machine, and taken to a different computer, that computer would immediately display the symtoms. Within two weeks, eight computers have been affected by this condition.

Have anyone experienced this?

A virus attaches itself to a file, it doesn't matter to the nasty where this file is. So, yes, I would say you have successfully infected eight computers. USBs are well known for spreading stuff like this before the USB drive it was usually the floppy handed around between co-workers.

Plug the USB in and run a full scan. Make sure that in the scan options all drives have a check mark. See what happens and post the result.

Crem

Please check Show Hidden Files and uncheck Operating Protected System Files in Folder Options. Then delete Autorun.inf

But first, you need specify which process of virus and remove it. You may use Process Explore to do it. Then using BitDefender scan all in machine which infected

Crem

husky

Please check Show Hidden Files and uncheck Operating Protected System Files in Folder Options. Then delete Autorun.inf

But first, you need specify which process of virus and remove it. You may use Process Explore to do it. Then using BitDefender scan all in machine which infected

Crem

Wow!!! Another "friend of autorun". We should found a club. <img class= " />

I won't loose any sleep about this anymore. As soon as I get me hands on any given machine I turn it off only to see it back on again as soon as I turn my back. <img class= " /> The funny part is that many sys admins disable 'my com' (desktop and start menu) in a false sense of more security but leave autorun enabled. :wacko:

vladx

Yes it's possible that your friend'scomputer was infected with a worm that installed itself on the usb drive and repeated this infecting other computers.So like husky said, do a scan on your USB drive and a good idea would be stop the Autorun if it's enabled.Also i advise your friend to do also a scan of his computer seeing that the possible infection started from his computer.If the dUSB drive still has problems, you might consider formating it.

mihai_romanian

What if it's a new worm that BD doesn't have signitures of?!

"Try scaning"-lol like he didn't scaned it like a million times.Think he would post here if he hadn't scanned his PC?

LOL-good luck dude,i don't use my usb port so i don't know nothing about what you could do.Wait for those evaghelists to give you some advices.By the way do you even have Bitdefender?I ask cause you never complained about your av which normally should be the first thing you blame if your PC gets sc*ed!

Cheers!

PS:Stop infecting other PC-s dude lol

Nabonibus

Think he would post here if he hadn't scanned his PC?

You have already answered the Question. I have scanned the USB Drive, Computer, everything, with BD, Norton, AVG. Nothing helps.

Niels

If you wanted to enable autorun again then you have to make a change to one of the registry keys:

Go to start,run,at the run dialog box type regedit press enter

Navigate to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDRom

First you have to press on the +-icon before HKEY_LOCAL_MACHINE. You have to do that also for the other folders and subfolders. You must find a key with the name Autorun that key must have value 1. After a reboot autorun must work again. For the rest follow the advice of the other people.

Regards

Niels

husky

If you wanted to enable autorun again then you have to make a change to one of the registry keys:

Go to start,run,at the run dialog box type regedit press enter

Navigate to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDRom

First you have to press on the +-icon before HKEY_LOCAL_MACHINE. You have to do that also for the other folders and subfolders. You must find a key with the name Autorun that key must have value 1. After a reboot autorun must work again. For the rest follow the advice of the other people.

Regards

Niels

Why would you want to do this?

You contradict yourself, Sir. On another thread you rebuff me for mentioning the registry and here you want to edit it to enable one of most dangerous features of M$ products. By now I really do wonder if you over there ever 'update yourself' by reading computer related news or magazines, not just the games

Do a google for Sony Entertainment and the nice feature of an entire series of music CDs. They've since been ordered to cease putting their little ""add on"" on the CDs. One can only guess how many lawsuits they have to to settle, out of court of course.

Niels

Hi husky

Calm down. The next time I will increase your warn level. Now I justed edited your post.

If you do some research then you will see that the only solution is to just change the value to let autoplay work again. Mostly it doesn't work by going to start,my computer,rightclick on the icon of you cd/dvd-rom drive or writer choose for properties,autoplay then you can retry to set what windows must do with cd/dvd-roms,....

You contradict yourself also in the other post where you posted use a registry cleaner or delete keys. After that you said that you didn't say that. I have quoted the part where you said that. I know lots of computers. Take a look at all my post. What you mentioned about sony I know that they used a rootkit in the past but that isn't now the case any more. I only read computermagazines.

Regards

Niels

husky

Hi husky

Calm down. The next time I will increase your warn level. Now I justed edited your post.

Regards

Niels

Reason for edit: removed inappropriate language

I don't keep a log of what I post. So what exactly was this "inappropriate language"?

I really do doubt that I've used anything that could be construed as "inappropriate language".

As you certainly can't post it here again you will have to send me a PM. That's something I would have expected in the first place from a professional moderator instead of publicily talking about increasing some warning level.

Niels

I removed for god sake and also the words that you put into capital letters. Other moderators do the same thing that was just to inform you. So the person wouldn't think twice for doing it twice. But please back on topic or pm me.