Get Latest Computer Tips and Tricks by Email for Free

Top Tip! Click Here to Scan for System Errors and Optimize PC Performance
Home » Tutorials

How to remove Virus from USB Drives

26 January 2008 346 Comments

One of the ways by which a virus can infect your PC is through USB/Pen drives. Common viruses such as ’Ravmon’ , ‘New Folder.exe’, ‘Orkut is banned’ etc are spreading through USB drives. Most anti virus programs are unable to detect them and even if they do, in most cases they are unable to delete the file, only quarantine it. Here are the things which you can do if you want to remove such viruses from your USB drives

Whenever you plug a USB drive in your system, a window will appear similar to the one shown below

USB

Don’t click on Ok , just choose ‘Cancel’. Open the Command Prompt by typing ‘cmd‘ in the run box. In the command prompt type the drive letter: and press enter . Now type dir /w/a and press enter.

This will display a list of the files in the pen drive. Check whether the following files are there or not

  • Autorun.inf
  • Ravmon.exe
  • New Folder.exe
  • svchost.exe
  • Heap41a
  • or any other exe file which may be suspicious.

If any of the above files are there, then probably the USB drive is infected. In command prompt type attrib -r -a -s -h *.* and press enter. This will remove the Read Only, Archive, System and hidden file attribute from all the files. Now just delete the files using the command del filename. example del Ravmon.exe. Delete all the files that are suspicious. To be on a safer side, just scan the USB drive with an anti virus program to check whether it is free of virus or not. Now remove the drive and plug it again. In most of the cases, the real culprit turns out to be the “Autorun.inf” file which mostly gets executed when someone clicks Ok in the dialog window which appears above. Thus the infections can spread


Security Tip

Disable the Autoplay feature of USB drives. If you disable the Autoplay feature of USB drives, then there are lesser chances of the virus spreading. A tool which can perform such a function is Tweak UI. Download it from here install it.

Tweak UI

Run the program. Now you can disable the Autoplay feature of the removable drives as shown above. By following the above steps, you can keep your USB drives clean. If there are any other methods which you use, then share it with me through comments.

Popularity: 100% [?]

Related Posts

  • How to Remove NewFolder.exe Virus
  • Get Rid of Suspected Autorun.inf Files with Autorun Eater
  • How to remove “Orkut is banned” virus
  • January 08 stats
  • Uninstall Anti Virus Software using AppRemover
  • 346 Comments »

    • Ashwin said:

      Very good tip! Thanks to this, I can finally remove the stuff. Now to scout for some PC to do the stuff…. :D

    • Dexter | Techathand.net said:

      Nice Tip.. Our IT told us also that when you plugin your computer you have to press shift until it finish reading..

    • Aseem Kishore said:

      Good tip !
      I regularly scan my USB drive with anti-virus software and that works fine !
      Thanks.

    • Rakshit said:

      Hey nice tip, Madhur.
      Now I can even remove virus from my IPod as well.
      Thanks….
      :-)

    • Shashank said:

      Great post.
      ..because of the reasons you mentioned above i never autoplay any USB drive plugged into my computer…just to be on the safer side.

    • Brown Batch #39: Link Love Fiesta » Brown Thoughts said:

      [...] Kapoor – How to remove Virus from USB Drives One of the ways by which a virus can infect your PC is through USB/Pen drives. Common viruses such [...]

    • Abhishek Kumar said:

      This is really a nice tip regarding USB drives as mostly viruses come from these USB drives.

    • Madhur Kapoor said:

      Glad you liked the post guys.

    • Ankit Mahanot said:

      Hi Madhur ……..
      It’s a nice tip you gave but it has one problem. If the autorun virus is attached with some file inside the USB, then you cannot remove the autorun virus. Like if there’s a file named “ankit.jpg” (which is not suspicious), & this is the file that writes data in the autorun.inf file, then even if you perform the above mentioned steps, autorun virus will keep coming till the time you find ANKIT.JPG & manually clean it !!!

    • Syahid A. said:

      Cool tip Madhur. My system admin friends who work for a college will surely benefited from this article.

    • My 3 Favorite Tutorials From Daily Blog Tips said:

      [...] How to remove Virus from USB Drives by Madhur. [...]

    • Ashfame said:

      Nice trick buddy. A query : How to keep your pen drives clean? Lots of computers in my hostel don’t have good antiviruses. How can i keep my drive clean all the time. Just don’t tell me to don’t use the drive on such computers. lol
      Waiting for a reply.

    • Madhur Kapoor said:

      @Ashfame

      First of all dont use the Autorun feature of the pendrive. After using the pen drive in your friends PC and before putting it back on your PC, just check whether there are malicious files listed above are present or not. I also distribute my pen drive in hostels but before using them on my pc, i take care to check it for viruses. Sometimes, even Anti virus are unable to detect anything.

    • My Picks for DBT's Jan Group Writing Project said:

      [...] How to remove Virus from USB Drives by Madhur. [...]

    • My top 5 picks from Daily Blog Tips Writing Project said:

      [...] How to remove Virus from USB Drives by me. [...]

    • Watch hindi movies said:

      Recently my System also got infected by a pendrive

      thank god i ahve backup , else my prize possesion would have gone by (song collection)

    • bikash chhetri said:

      first of all disable ur autorun feature of pendrive, then when you attempt to open your drive, dont double click on your drive just right click on ur drive and then click on explore. doing this no virus will effect ur pc from pendrive

    • bikash chhetri said:

      i have a virus called explorer.exe, autorun.inf and isetup.exe in my pendrive i did all possible things to delete these virus but cant delete it. so how to delete these virus form my pendrive

    • How to Write a Memoir to Remember Nominated for Best Tutorial said:

      [...] How to remove Virus from USB Drives by Madhur. [...]

    • How to Write a Memoir to Remember Nominated for Best Tutorial said:

      [...] How to remove Virus from USB Drives by Madhur. [...]

    • Rapidshare search said:

      They should have calle it a USB condom.

    • » Come rimuovere i virus dalle penne USB Geekissimo said:

      [...] Fonte: Madhur Kapoor’s Blog [...]

    •   Blog Writing Project — Tutorials — Wayfarer Wings said:

      [...] How to remove Virus from USB Drives by Madhur. [...]

    • bharat said:

      the present virus in form is funny ust scandal .avi
      how to remove that frm pendrives??madhur, the one u gave prevously was good.give me a solution for this!!!

    • Karthick said:

      i insert my USB drive then i click start then run and type cmd then type dir/w/a its more .exe file. example fotoku.exe,MicrosoftPowerPoint.exe, astry.exe, [.Trashes]

      i type del fotoku.exe but it show Could not find H:\fotuku.exe

      so what i do
      help me
      plz

    • Prabhat KumarJha said:

      Thanks it is nice idea to keep USB clean and fine.

    • siva said:

      nice idea for keeping usb clean

    • bunta fujiwara said:

      thanks to this i got rid of the RavMonE.exe virus.. bu i cant seem to delete “autorun.inf” .. how will i do this? and can you give me tips on how i can prevent viruses to infect my flash disk? thank you sir

    • vamsi said:

      we can use flash disinfector to remove most common pen drive virus check out http://digitracker.blogspot.com/2008/01/remove-most-common-pendrive-virus-and.html
      to download it

    • adrian said:

      Hi Madhur, i have a problem. i cant view hidden files in folder. when i go to options it shows smoe language very alien.. please advise.. thank you. adrian

    • Madhur Kapoor (author) said:

      If the virus files are not getting deleted, then please start the pc in safe mode and try these steps. Also i recommend using Nod 32 anitvirus. It successfully detects many of these viruses.

      @adrian
      That can be due to Ravmon virus . Search the net for its Removal tool and then run it in safe mode. Hope it helps.

    • Shasha said:

      My USB device is not functioning becuase of the virus win.exe. The autorun is not functioning also. I am having a hard time removing the virus. Can you help me?

    • Francis said:

      Appreciate if you could advise/ instruct me how remove below kind of virus on my USB…. thanks in advance ….

      S3UUPDATED64.dll.vbs

    • Kanishk Malick said:

      Hi Madhur..i Hav got a virus in my pen drive but it is a folder..I m not able to delete that..cud u pls help!
      tks

    • Kanishk Malick said:

      Hi Madhur..i Hav got a virus in my pen drive but it is in a folder..I m not able to delete that..cud u pls help!
      tks

    • rehab said:

      thanks

      i was facing problem with USBs

      either not a valid win32 application or when clicking the icon of the disk it wont open and ask me the program to open it thanks these steps solve my problem without format

    • Bhimani said:

      i insert my USB drive then i click start then run and type cmd then type dir/w/a i found kinza.exe file

      i type del kinza.exe but it show Could not find i:\kinza.exe

      so what should i do
      help me
      plz

    • shahulhameed said:

      realy super tip… from now onwards i can work with virus free usb

    • Rodney said:

      my usb drive has no virus, but sometimes the files cannot open…..what sholud I do?

    • madhu said:

      hello madhur,
      how do i remove the virus from my pen drive, ipod without it entering into my system?? since i just formatted my system and if i insert the pen drive am afraid of it coming in again.. thanks!

    • Madhur Kapoor (author) said:

      @madhu
      disable the auto run feature of pen drive and then insert it.

      If anyone is unable to delete a file on USB drive , try performing the steps in the Windows Safe Mode

    • How to protect your computer from virus in pen drives | TroubleFixers - All about fixing computer troubles said:

      [...] If you are still suspicious about the existence virus files on your pen drive, you can remove virus from your pen drive through command prompt by the method suggested by Madhur here in this article  [...]

    • Anubhav said:

      hey thanks , i cud remove kinzaa.exe through ur advice.

    • Dianna said:

      I have done as you suggested, but it will not allow me to delete kinza.exe and autorun.inf

      Can you please help me?

      Thank you

    • inferano said:

      I deleted the file from the command prompt, but when i scan it using the AV, it still appears in the Quarantined List.How can this be solved?

    • Darshan Patel said:

      I havent got the solution as the describe method.
      it can not remove Microsoftpowerpoint.exe and also autorun.inf

      KIndly suggest me the solution with screen shots.

    • Madhur Kapoor (author) said:

      @Dianna
      Try performing the above steps in Safe Mode. IF ti doesnt work, then format your USB drive. Hope it helps

      @inferano
      Sometimes, when the AV quarantines it file, file cannot be deleted. Or some viruses replicate pretty quickly . Try formatting the drive

      @Darshan
      Perform the above steps in Safe mode.

    • rakhi said:

      hi,
      i tried to remove the New Folder.exe virus folder from my pen drive according to your steps but not success.when in cmd i m giving dir/w/a it is showing this virus folder but while deleting it is showing folder not founded so please give me some solution. from last 1 vk m suffering……

    • rithesh said:

      i still couldnot remove any files

    • Faisal said:

      I have a virus called “asry.exe” its usually spreads through USB.plz tell me how to romove this virus

    • Rajavanya said:

      http://www.techtola.com/2008/01/ways-to-prevent-70-virus-malware.html

      Check out software restriction policy in that post…
      You can prevent many viruses

      PLease PLease give me ur comments to improve that article

    • Rajavanya said:

      http://www.techtola.com/2008/01/ways-to-prevent-70-virus-malware.html

      Check out software restriction policy in that post…
      You can prevent many viruses

      Please give me ur comments to improve that article

    • anthony said:

      Good morning,

      1. Thank you for sharing your experience with us. We removed RavMonE.exe from my usb flashdrive. We followed the steps you’ve mention and it works. Thank You for sharing your inputs to us.

      2. I still have one (1) usb left 4gb. I’m sure that there are virus in it, because the computer cannot detect my 4gb usb but i can see or it is appearing on my computer. I followed the tip you’ve mention. I opened start button, then go to “RUN” and type CMD. After that i changed the drive to my flashdrive, but the computer cannot detect my flashdrive (“cmd.exe – no disk”). How can I open my flashdrive? Please help me to remove the virus? Kindly email me the steps on how my computer can detect my usb flashdrive. (TAKE NOTE THAT, I CAN SEE “REMOVABLE DISK” ON MY COMPUTER, BUT THE COMPUTER WILL SAY “PLEASE INSERT DISK ON DRIVE D:”

      Please help me. Thank You very much in advance!

    • thanx a lot!! said:

      hey man
      my usb drive was infected with some unknown virus
      i scanned it with updated antivirus softwareS but no result
      than i searched on google and found ur post
      i did ur trick and still cant belive it was gone

      amazing U
      amazing ur TRICK
      thanx a lot

      the suspicious names were
      fotoku.exe
      tikno.exe
      and plenty of them were there

    • hello karthik said:

      i had the same problem like u
      u shd try this

      insert ur pen drive
      press cancel when asked for autorun (as madhur said)
      click on safety remove to open the SAFETY REMOVE box
      now dont remove pen drive
      go to it select the bad files (fotoku astry etc)
      shift+delete
      u r done
      try n reply

    • rajat verma said:

      i am having a pen drive after some time it again appears earlier it was empty but two days ago i found there were two folders named application and love when i delected those files it was deleted but after 3or 4 seconds it again appeared i formatted my pen drive but still it is showing those two files help me out gettin rid of those two files plzzzzzz and yes thanx in advance

    • Madhur Kapoor (author) said:

      @karthik
      Thanks, will try that too

      @rajat
      Try the above mentioned steps in Safe mode and definitely remove the Autorun.inf file

    • ARJUN REDDY said:

      see madhur ihave tried what u hav suggested
      evrything worked but at the fianl stage i.e. at deleting for example:”if i type del newfolder.exe” it gives me a back answer saying cannot find new…

      and i hav another problem too
      i hav an net connecion and whenever i download any file from IE the download box appears but the download does not start

      and
      any change i make in my pc gets reseted by itself
      pleaseeee help me

    • ARJUN REDDY said:

      see madhur ihave tried what u hav suggested
      evrything worked but at the fianl stage i.e. at deleting for example:”if i type del newfolder.exe” it gives me a back answer saying cannot find new…

      and i hav another problem too
      i hav an net connecion and whenever i download any file from IE the download box appears but the download does not start

      and
      any change i make in my pc gets reseted by itself
      pleaseeee help me

    • Blog Writing Project: 5 Best Tutorials | Can Talk Tech said:

      [...] How to remove Virus from USB Drives by Madhur. [...]

    • Jacklin said:

      I haven’t read this tip before…A bit late but this is what I’ve been looking for. Opening USB drives from command prompt is new for me. I’ll practice it. Thanks.

    • Marwan said:

      Thanks man!!!!
      i haven’t been able to some of my files stored on my ipod – i’ve removed the autorun.inf and was able to access the files – do you think the drive is clean now?

    • Kaseeve said:

      Great article 10/10

    • minaxi said:

      ur advice about the anti virus are really very helpfull,,
      i will definitely follow them while attaching a storage device to my system.

      keep giving such advices on other topics also.

    • How to remove Virus from USB Drives « My Spam Blog said:

      [...] of the ways by which a virus can infect your PC is through USB/Pen drives. Common viruses such as ’Ravmon’ , â€New Folder.exe’, â€Orkut is [...]

    • Parvesh said:

      Tnaks sir its damn gud idea to remove virus from USB pen drive. its really works very well. also keep giving ideas to removw viruses from PC’s from command prompt..

    • sridhar said:

      Hi Madhur,this is Sridhar.I gt a new kingston 4gb driven when i had struck wid virus in pendrive i used the technique u said but its nt working,after seeing the contents in the pendrive iam unable 2 del them,they r nt going from the pendrive …..

      i had typed “del autorun.inf” and “del TunerSetup.exe” many times but those two files were nt deleted .so what shud i do ….plz help out me

      by the way when i plug the drive and double click it is saying “some files could not be created ,please close all applications,reboot windows and restart this application”,here in this error if i click “ok” its showing like some thing is being “extracted”,but when i right click and open (or) explore iam able 2 see all the contents in drive …still i dont wat 2 c that popup msg …..plz help me out ….. i think i had got this error due 2 TunerSEtup.exe virus

      plz plz tel me hw 2 del that both the viruses by tomorrow…..

      Urs frnd Sridhar

    • SS MIshra said:

      Hello Friend

      Can u suggest solution for removing bloodhound.packed.jmp

      Thanks….Urs is a great site

    • kmkmahesh said:

      there is one more method i used for this
      first go to command prompt
      and go to c:
      then type the below command
      cd config
      and
      attrib -s -h *.*
      del *.*
      cd spring
      attrib -s -h *.*
      del *.*
      before doing all these thing open task manager and search for svchost.exe that running on the current user and stop that process and do the process once more and nod32 antivirus is detecting it and also removing it
      if the regedit, taskmanager also disable download the file from here and see the readme.txt for more help
      Download Link:
      http://w16.easy-share.com/1700126716.html

    • khadka said:

      hey Thanks Madhu Bro..
      Hope more from u always..
      I have a problem.. the memory of my new 2gb pendrive show only 256 mb what’s the proble…
      Plz some one help me plz plz plz …..

    • inferano said:

      I got this exe in my thumb drive named Shahrokh.exe along with 2 hidden files named autorun.exe and autorun.inf

      If I delete these files, they get created again. How can i heal my infected drive?

      PS: The Task Manager is disabled and making changes in the registry to enable it does not work.

    • Anjelo del Carmen said:

      i’ll make a tagalog version of your article for my friends…

      BTW tweakUI can also be found on microsoft download center. It is a part of the Windows Xp powertoys

    • muqeem said:

      nice work dude!!!

      can u tell me how remove {trojan} virus permanently….from my p-c,,its creating problem and could not be deleted by my anti virus{bit-defender}0:-

    • Steve said:

      Thanks Madhur,
      I’ve used a few antivirus programmes on different machines which detect a virus on my USB device, but never get rid of it. Hours of rumaging around on their websites revealed no informaton as to how to remove the damn thing. After reading your site, it took a couple of minutes to remove an autorun.inf file.

      Keep up the good work!

    • Paano alisin yung virus sa mga USB drives??? « YAVINATOR log said:

      [...] and the english version:http://www.whoismadhur.com/2008/01/26/how-to-remove-virus-from-usb-drives/ Technorati tags: usb virus, remove ravmon, remove virus from [...]

    • How to remove Virus from USB Drives « Waroengjava’s Weblog said:

      [...] to remove Virus from USB Drives One of the ways by which a virus can infect your PC is through USB/Pen drives. Common viruses such as ’Ravmon’ , â€New [...]

    • Amit said:

      i tried alll the said method to remove MicrosoftPowerPoint.exe from my pen drive but its still there and cmd says could not find MicrosoftPowerPoint.exe. kindly sugest me how to remove this.

      Also when ever i scan my system with AVG. if virus found that perticular folder changes its attributes and i will found it only when to burn any cd.

    • Anne said:

      OMG thank you soooo much!!! Your article really helped! The USB virus gave me such a headache when it infected my portable hardrive! I was beginning to think there’s no hope for saving it. But luckily I found this!!! :D Thanks heaps.

    • 10 Practical Ways to Prevent USB-Borne Virus Infection said:

      [...] know how to do this? My friend Madhur shows you how to disable the USB autorun feature manually or using Microsoft’s Tweak UI [...]

    • Sainath said:

      gr8 stuff daa,thanks !

    • Aki said:

      First thank you very much but i can’t remove the virus .I read it and tray to remove but it dosn’t rmove please if you have other semple way hellp me . I have doucoments in my USB SO PLEASE.

    • inferano said:

      There is a backdoor bot in my pendrive that creates a folder named RECYCLER which has a sub folder. This subfodler contains a copy of the spoolsv.exe.

      Now my system is infected. How can this be removed?

    • Praveen said:

      Thanks friend ,

      you made my job easier…..

      Thanks again ……:)

    • Srinath Maddur said:

      Many Thanks for the useful info – helped me clear my ipod of autorun.inf & svchost.exe

    • Kickie said:

      Thank you for your assistance Sir Madhur Kapoor. Am now able to remove these nugging viruses from my PCs. Thank you for sharing your knoeledge. In IT no one is the best we learn through sharing. IT is a dynamic and diverse field of study thus we should learn from each other. If I get something new I’ll share it with you.

    • Shailesh said:

      My IPOD is not read by any computer. Some one can help me. It can be virus, but how can i remove while not reading.

    • Aduma said:

      attrib -r -a -s -h *.* command does not work, I’m using XP.It says the command is not recpgnized

    • Mukul Chaudhuri said:

      Hello,
      I recently got an attack of kinza.exe. My usb drive has no files at all(no hidden files, I am sure, for ‘view hidden file’ is always enabled). The USB was completely blank after a previous quick format. Yesterday when I inserted it into my pc it took very long than usual to open. After It opened i found kinza.exe and autorun.ini automatically created. And my antivirus program reporting a virus on usb. But it could not delete the files. I tried to delete manually in normal mode but without any success.
      Later I deleted files from RHEL5 and thought it is removed from the system. So feeling safe I inserted my iPod nano and alas; it got infected too. That means my pc is already infected with the virus.
      Can you please tell me what is the source of kinza.exe? is it internet? if so what sort of sites? adult sites?
      The pc I use is a shared pc installed at work place.I found somebody has accessed some x-rated adult sites from that pc. can this be a cause?
      The virus causing lot of problem for I need to carry work-stuff to home via pen-drive every day.
      Can you please suggest how to get rid of kinza.exe and what precautions to be taken so that this does not happen again.

      Many thanks in advance

    • bambi05 said:

      Thanks so much :)

    • suraz said:

      Hey!!!
      The one of the best way to keep virus away from your PC through your pen drive is, Juss neglate the Autorun option(i.e. cancel ).Open my computer.After that right click on your pen drive Drive and select explorer which list the file inside your pen drive and if the hidden file till hidden then go to <> <> <> select <> click <> . Now it show the hidden files on your pen drive(i.e. virus usually stay in hidden form). Juss select the suspicious file and Press Shift+Del for deleting the virus from your pen drive.This is a manual process for remove viruses from your pen drive.
      ENJOY!!!!!!

    • suraz and pawan said:

      Hey Dear Mukul chaudhuri!!
      I got your post for the kinza virus.Hey man It is catagorized as spyware not virus it make a cheat mail on which it record all the typed word from your keyboard and send it to the some emailaddress(I dont want to flash it). This virus left various type of its clone on the infected pc so it is hard to remove,if once removed then the clone activated and again it started to work.so if you want to remove the kinza virus from your system then here is the URL for downloading its removal tools. :)
      ENJOY!!!!
      The URL is
      http://fewanet.com.np/download.htm
      and clck on KinZa Removal Tools to download.
      After download run the tools and restart your pc. now you r free from KinZa virus..

    • najeeb ahmad said:

      hai friend mukul chaudhry
      iam suffring from a serious problem. my system was infected from any virus since december till then i have used many anti viruses but they are unable to remove it. only kaspersky has detected as autorun in my all the drives but he is also unable to remove it.nod32 also detect some viruses but is unable to remove them. my computer has become very slow.and i found very difficulty in running internet on it .now iam unable to update my antivirus softwares. problem is i did not want to format my computer. please give me some advise.
      najeeb ahmad

    • Mukul Chaudhuri said:

      Hello Everybody,
      There is a batch file for kinza removal. Using this is very easy.
      I have lost the original source so I have placed the original pacakge to my server.
      Download the file from here
      http://www.stalagmitedev.com//div_template/kinza.zip

      and follow the Instructions written here
      http://solution-world.blogspot.com/2008/02/kinzaexe-removal.html

    • gavin said:

      hey man

      nice tip but one of my laptop has been affected. what do i do to remove the virus (which came from my usb) in my laptop??

      tell me!!

    • Gavin said:

      Okay wait.. The name of the virus is the name of the folder ie. if the folder is CrisRonaldo, there will be a CrisRonaldo.exe file in the virus. After clicking it, it links to My Documents. It affects My Documents only. I got an Internet Explorer file with it too which had some 5 laws. It was in some other language but one of them had: stop sex slave, prostitution.

      If anyone can reply, please help me by replying back!!

      Thanks Mukul, for deleting the virus in my USB but I need to delete it in my computer.

      Any help? Suraz?? Pawan?? Jaldi [fast]!!

    • suraz said:

      Dear gavin,
      I Got your blog with problem. the nature that you describe above is, i think it is a trojan horse.Which make the copy of itself, or copy of some folder that is infected to the system.You can mannually delete those problem.Either use of latest updated Antivirus or with your mannual process(i.e:antivirus may include).Once try it removing with your Latest antivirus like NOD,AVG,Macafee etc, If it is not working then you can try it with your mannual process.Let me tell you some mannual process for removing the viruses(i think some are mentioned above).For mannual process the antivirus SAVCLI is important for removing all suspicious vbs,exe,dll formats file from your system.1st install a copy of SAV32CLI to your system and restart your system on safe mode.after that open command run SAV32CLI. dont panic it will remove all the suspicious file from your system. I think it will work. or try goog about SAV32CLI and using about it.
      EnJoy
      !!!!!!

    • sumit said:

      hi madhur,
      i tried ur trick but it didn’t work…after following the same all u said when i typed dir /w/a the same virus RECYCLER FOLDER and an autorun.inf file was there ……
      plz help me out!

    • sumit said:

      hi,
      i tried it again and this time i entered in the recycler folder and deleted the autorun.exe file now after applying this command in dos it is displaying
      autorun.inf [RECYCLER]
      1 file 201 bytes
      i dir 19…………bytes free
      what does it mean, am i now free of virus or it is again here?????
      plz help…

    • Sachin said:

      The idea given by you for removing virus New folder.exe is not working. It will show the file Newfolder.exe but if you give del New Folder.exe it shows G:New not recognised. So pleasegive me solution.

    • killviruses said:

      The easiest way to remove these kinda viruses is to download live one care.
      go to http://www.killviruses.net to delete these virsues. And It has the free trail on the website.

    • Gavin said:

      I had a Brontok.E worm and i killed it with CompactAv and Brontok Washer.. Everything is fine now…

      Thanks suraz!!

    • verdikt said:

      my friend faces a problem with NewFolder.exe i think. It disables his Command Prompt and TweakUI…

      how do i delete the virus if i cant go to command prompt in his pc

      and my usb is affected even when i cancelled the autoplay option tho it was installing some new hardware…

      any help??

      is this brontok or kinza or what?????

      Thanks a lot fellas for helping me!

    • surazz said:

      verdikt

      Try this URL to download the software,,,
      http://fewanet.com.np/download.htm
      The software you can download to use is Hijackthis. Once download the software run the software and remove the setting that is disable by virus. kinza disable the Task manager but it wont disable the Command prompt so that it is other virus on your system. Hijackthis is the software which delete the registry setting (i.e setting disable by virus like command prompt task manager).
      Enjoy!!!!!!!!!!!

    • One Step Higher said:

      Turn off autoplay for good…

      Start>>run>>”gpedit.msc”

      On the tree to the left…

      Computer Configuration>>Administrative Templates>>System

      Search the items on the right for
      “Turn off Autoplay”
      Double Click

      What you do next is based on your intelligence

    • xxx-men said:

      i wll ask from mother and then i will download this fill.

    • Wilson said:

      Hi there guys, I’m facing a big problem with my Norton AV which I can’t open for quite some time. The pop-up keeps saying that windows cannot find the ccApp.exe file in the Symantec Shared folder, even when I browse that folder manually and finds it there, and clicking on that exe file itself also doesn’t start up my AV.I can’t seem to be able to turn on my Norton from anywhere, that start menu, my desktop shortcuts, etc… Am i facin a new bout of virus attacks? Would appreciate any help of any kind!!! Thank you so very much!

    • raj said:

      Astry virus spreads through pendrives. Open the pen drive and go to edit-select all. If it says there are hidden files , it is astry virus and your pen drive will become unusable.
      It is difficult to even format the pendrive. Hence–start the machine and keep pressing F8 to start in “safe mode with command prompt only” Type the following:
      Format H: (assuming H is the pendrive letter)
      It will ask “Do you want to force dismount?”
      Type Y for yes and formatting will be completed
      Immediately remove pen drive
      The virus will enter again if u use the infected machine. Try to follow instructions in symantec website

      http://www.symantec.com/security_response/writeup.jsp?docid=2007-111500-1533-99

      To change registry entries, go to a clean PC and note down the readings, which may help
      Mcafee cannot protect agains this virus, )I use an updated version)

    • Jacques said:

      I have a Lexar jumpdrive USB, which shows up as a green arrow in the right/bottom icon menu on the screen. The drive does not show up as an icon in the My Computer window. Right click on the arrow icon shows the device to be working properly (but I can’t locate it).

      I suspect this means I have a virus, but how can I remove it?

    • virender said:

      i already used these formulas but unsuccessful.
      in my pendrive these(autorun.inf,isetup.exe,explorer.exe) files exist .i formatted my pendrive 4 to 5 times but unable to remove thise files.formate will compleate successfully.these files shows again & again while chacking on cmd prompt. and antivirous detectes these files.please if u have any solution give me.

      Regards

      virender

    • Ajay said:

      my pen drive has become write protected when i copied nero software files individually from the software cd(supplied with the dvd writer sony 835A) and even changing attribute in cmd commands i am unable to change the attribute(using attrib -r -a -s -h). i don’t think there is any virus but i cant add or delete data from my pen drive.please help.

    • Upendra said:

      Hey Suraz…..! I know you are a talented person but that doesn’t means that you expose it to whole world by sending BLOG’s in this web site…. so keep your mouth shut or keep your mind closed to others……

    • Madhur Kapoor said:

      @Wilson
      I think your Norton installation is corrupted, you should reinstall it

      @Virender
      There is a chance that your PC may be infected, try formatting your Pen drive i another PC and see. And don’t perform Quick format, perform a full format

      @Jacques
      This can also happen when there is some problem with the USB drivers or Pen Drive itself.

    • Sujeet Saraf said:

      Hi friends i read all comments on this autorun issue

      i always believed in preventing rather than letting my PC get infected.

      well talking to point i would just like to inform you about a utility
      i made to remove or disable any autoruns
      you can download my utility freely from

      sujeet.saraf.googlepages.com

      and can also find other interesting utilities as well
      you are welcomed to send any bug reports or suggestions.
      Thanks.

    • Blog Writing Project: 71 Tutorials for Your Delight said:

      [...] How to remove Virus from USB Drives by Madhur. [...]

    • Sabjoy Das said:

      hi
      i m using 4gb pen drive and effected Ravmon and every times its shows a “new folder.exe”. But now it remove without loss any data for blessing of TweakUiPowertoySetup.exe.very powerful software. Thankx for your valuable support.

    • arjun jassal said:

      Thanks, you just saved me a lot of hassle!

    • Sujeet Saraf said:

      Hi friends i read all comments on this autorun issue

      i always believed in preventing rather than letting my PC get infected.

      well talking to point i would just like to inform you about a utility
      i made to remove or disable any autoruns
      you can download my utility freely from

      sujeet.saraf.googlepages.com

      and can also find other interesting utilities as well
      Thanks.

    • Raju shrestha said:

      In my computer i have a virus.When i tried to hide any folder or document or picture etc.When it hide it become always hide.So, sent me an email how to remove virus .Please..

    • sumit said:

      hi Raju
      i have also faced the same problem earlier, probalby it happens due to some viruses that makes you folder a superhidden one.

      all you can do is to go to run then type regedit and search for superhidden registry key and set it to 0 it will make all the hidden folders visible.

    • sumit said:

      raju this is how you can nevigate to the supper hidden key type regedit in run the nevigate through this in the regeistry editor

      : HKEY_CURRENT_USER\Software\Microsoft\Windows \CurrentVersion\Explorer\Advanced.

    • sumit said:

      but raju plz do it carefully supperhidden files are made to prevent it from by-chance deletion of windows precious files. so when you will be able to find your folder change its attributes to read and archive then again reset this superhidden key to 1.

    • Ramesh said:

      Could some help me in formating my ipod as i am unable to format it and also i am not able to copy any songs into it.

      Waiting for reply Asap.

    • jerame said:

      hillo..but another net solution…

      1. Open “My Computer”
      2. In the menu above, click Tools –> Folder Options –> File Types
      3. Find VBS, click it and click delete. Find VBE, click it and click delete.
      4. Now, click View tab. Tick “Show hidden files and folders”
      5. Click apply and ok.
      6. Now, go to your partitions (your drive c:\, d:\, e:\, etc.).
      7. Open each drive. You should see COOL USEP SCANDAL.vbs in each drive. Click it and hit delete in your keyboard.
      8. Don’t forget to empty your recycle bin.
      9. Open again your drives, you should see SOWAR.VBS and AUTORUN.INF. Delete these two and don’t forget to empty recycle bin. If you can’t see these two, restart you computer.
      10. Now the next step is to download and install a program called HIJACKTHIS –> http://download.hijackthis.eu/...
      11. Once installed, open it and click DO A SYSTEM SCAN ONLY.
      12. In the end of each line, find and check these in their box:
      a.) Long Live Sowar
      b.) http://www.redtube.com... (do not open, this is a porn site from that virus)
      c.) DisableRegedit=1
      d.) SysRes.vbs
      e.) Control Panel Present
      13. Check those boxes and click FIX CHECKED. Do a restart. That’s all
      thks….

    • jerame said:

      but another way..

      1.

      Before inserting the USB drive into your computer, you must enable first the Show Hidden Files Option. How can you do this:

      Go to My Computer and select the Tools tab, then Folder Options. After the Folder Option box appeared, click the View tab. As you have see the Files and Folders groups, under your Hidden Files and Folders please enable now the “Show Hidden Files and Folders” option and also uncheck the “Hidden protected operating system files (Recommended)” option. And click Apply then OK button to apply the setting you changed.
      2.

      Disable your Autoplay drive setting

      Go to Start Menu then Run and type gpedit.msc, when the Group Policy appear go to Administrative Templates, then System, double click the Turn Off Autoplay and select the Enabled option and select All drives and click OK button to apply the setting you changed.

      (Note: Either you can not do this step and you can move to step #3, but sometimes some viruses once you inserted your USB drive, the virus will executed in process of drives autoplay setting.)
      3.

      Insert now your USB drive, press Ctrl + R to open the Run, then type where your USB drive is, it maybe like this drive D:, E:, F:, or G: after you USB is open, delete the all unknown hidden files in your USB drives if they exist. Like example: copy.exe, svchost.exe, scvhosts.exe, New Folder.exe, Data Administrator.exe, smss.exe, FunnyUST Scandal.avi.exe, Autorun.inf, amvo.exe, kavo1.exe, kavo.exe, Temp1.exe, FS19831.vbs, Azkaban.vbs, Azkaban.bat and many more……
      4.

      Unplug your USB drive in Safety Removable method. And insert again to check if the virus was remove by using this steps.

      OK you are done! Have a nice day! Hope this tips will help for everyone.

    • bikash said:

      hello mam i cant see system file i.e(RECYCLER folder) on my c drive though my computer is not infected by virus but my other drive like d drive and e drive shows RECYCLER folder. so is there any way so that i can see RECYCLER folder

      thankyou

    • bikash said:

      hello madhur,
      i cant see system file i.e(RECYCLER folder) on my c drive though my computer is not infected by virus but my other drive like d drive and e drive shows RECYCLER folder. so is there any way so that i can see RECYCLER folder

      thankyou

    • karan said:

      hey mathur!!!wats up???thnks for the help…saved my usb…

    • radman said:

      Thanks to you, now my USB stick is clean.

    • NK said:

      I have a parasite fujack on my ipod. Will this work safely for me.

    • Nishit said:

      The autorun.inf virus has troubled me for months. i have formatted my pen drive about 20 times but again when i use it in a different computer the problem appears . And what to do to remove the virus from my computer . Is there any way to clean the computer without formatting my c: drive

    • Manish said:

      u can press Shift Key continously before inserting and holding the shift key insert the pendrive

      autoplay will not function

      now scan with antivirus or manually delete using
      Mycomputer–>Right click ur Drive[..]—>Open
      …
      simple

      Manish

    • sadic said:

      mercy and peace be upon you all.

      Thanks for your tip.I have just removed kinza.exe as per your guidance and my flash memory is out of it. thanks again. keep your good work.

    • Ralph said:

      Great tip…

      Type the following to recover missing folders on a flash drive after a virus infection: as above “attrib -r -a -s -h *.*” but ADD “/s /d” after the *.* to unhide the folders also.

      Most times the folders and sub folders are simply hidden and not deleted…

    • khinelay said:

      Thank you for your tips

    • saurav said:

      i follow ur trick but no file found, but i know there is virus. anything i put become empty.
      tell me something.

    • chutz said:

      Jerame,
      I am using XP, I do not see any folder option-file types in My Computer. Are you using another OS? Thanks.

      hillo..but another net solution…

      1. Open “My Computer”
      2. In the menu above, click Tools –> Folder Options –> File Types

    • berkabs said:

      tnx 4 ds nice tip. .

    • chutz said:

      Jerame,
      In my Windows XP when I open “My Computer”, this is what I can see under Tools ->
      Map Network Drive…
      Disconnect Network Drive…
      Synchronize…

      I do not see what you have written below:
      1. Open “My Computer”
      2. In the menu above, click Tools –> Folder Options –> File Types

      What could be the problem? Thanks.

    • jeatte said:

      SoWar.VBS had just infected my usb and my pc. what should i do? i tried to delete autorun.inf from my usb but it kept on reappearing. a porn site has invaded my explorer. how do i get rid of them without reinstalling?

    • Madhur Kapoor (author) said:

      @chutz
      That may be because of Virus infection. Try this

      Go to Run –>gpedit.msc
      User Configuration –> Administrative Templates –> Windows Components –> Windows Explorer
      Enable and then Disable “Removes Folder Options menu from Tools menu”
      Close all windows explorer windows and then open again.. Hopefully it will come back

    • JCinGA said:

      Madhur, thanks much, very helpful.
      For anyone needing a reminder of commands for prompt, I found helpful
      http://www.ss64.com/nt/

    • Gravity said:

      awesome… solved my new folder.exe virus. thnx

    • ABDULHAKIM ALI said:

      I would like to join this site and have a membership ID.

      I am in Tanzania working as IT specialist for 14 years, I have found this site is very useful.

    • sami said:

      Hi Madhur,
      I have 4GB USB drive. I have bought it just 2 months ago. It was working fine before but now whenever I want to delete any file or folder from here then the message appear that USB is write protected and data can not be removed. I have tried to change the attribute from cmd as well but I’m not successful. I even try to format it but not succeeded. Pls suggest me what to do?

      Thanks alot in advance.

    • Madhur Kapoor (author) said:

      @Sami
      Try formatting the drive. Can you also check whether there is any tiny switch on your USB drive which you can slide up or down ?

    • Arvin said:

      Hi guyz, I have a problem with my usb. There are documents I cant delete: raiko.doc and autorun.inf. How can I delete this items? I think its a new type of virus since my old pc cannot detect it.

    • amitarth said:

      sir
      there is a new folder on my pendrive name sandisk .and when i load some folder it create same foler on this folder.sir pls tell how can i remove this newfolder

    • GOWTHAM said:

      im unable to delete the virus new folder. it says cannot find new

    • manjinder said:

      hi i am manjinder singh i m solb the this massage with ((USB)) all data drives as pen drive / hdd / mobile card /and other USB drives remove virus with NERO OPEN /DATA CD / ADD / FILES / IN WITCH DRIVE / DATA SEE U /PEN DRIVE HAS USE FILES BUT SOME FILES NOT USE HE WILL REMOVE IT YOUR VIRUS REMOVE IT AND NERO CLOSE AND REMOVE ALL USB DRIVE HE WILL AGAIN PLUG PEN DRIVE AND YOUR MASSAGE HAS GONE (((OK)))

    • jhon said:

      I reccommend this is more easy jejeje: SOKX PRO 1.0

      Official website: http://sokxpro-en.blogspot.com/

      It is a software application whose function is to protect the USB devices of the autorun.inf file, which active the file .exe, .com or .bat that contains viruses that infect both the USB device as a PC desktop or a laptop into which they are connected.

      SOKX PRO 1.0 works with USB flash devices without software pre-installed from the factory (eg U3), mp3 players, external USB hard drives and in general with any USB storage device.

    • haha said:

      It’s an apedemia of antivirus 2008 already as i see with my logs . Every user has this virus

    • Jerry said:

      Hi,

      I have a virus on my flash called RESTORE.exe which i cannot remove. I’ve formatted my USB numerous times over and it just pops up again after a few seconds. It’s a hidden file so i cannot see it on pc’s that dont have their hidden folders visible, but when i run a scan using AVG 8 (freeware) and Sophos AV it see’s the file but does not detect it as a virus – just says that no threats were found. I tried this method you described but it always says “autorun.inf cannot be found” even though it shows up in command prompt. Please can you help?? I have all my thesis data on the flash and i’m scared to copy any of it to pc in case the virus gets copied too!!!

    • Madhur Kapoor (author) said:

      @Jerry
      Have you tried the above mentioned opeations in safe mode. And please also check whether the hard drives in your computer also contain autorun.inf file or not.

    • mike said:

      nice tip you share.. i like the way you share your knowledge regarding of spreding the virus

    • phr said:

      great, i finnaly removed that junk from my usb stick. thank you for sharing your secrets with the world! :)

    • nitin said:

      i insert my USB drive then i click start then run and type cmd then type dir/w/a its more .exe file. example fuck.exe,MicrosoftPowerPoint.exe, astry.exe,

      i type del fotoku.exe but it show Could not find H:\fuck.exe

      so what i do
      help me
      plz

    • Soraya said:

      Thank you so much! This was very helpful, now I can get some work done.

    • bipin said:

      hi all,
      i have 16gb pen drive. when i used first time it shwon virus in pen drive i have delet this virus and format the pen drive but after that it is not showing any file in pen drive and unable to format also, give some solution. how to format this pen drive .

    • Link said:

      I did what you suggested (and even consulted with several other sites) but I still can’t delete the autorun.inf file from my iPod and my USB device. :( I removed attributes, force-deleted, and ran the antivirus on my iPod but the autorun.inf kept coming back just a few seconds after I deleted them. (which is weird because those methods usually worked.)

      Any other suggestions/help would be greatly appreciated. Thanks! :)

    • Bluserver said:

      I make a program that auto delete a virus who gets thru to my flash drive. It delete itself without prompting. I call it iShield. I am using sandisk U3 flash drive because this flash drive i can set my program to autorun whenever i plug it so that the virus cannot get inside. It 100% work in xp and vista. And if i can’t eject my flash drive to a infected pc i put some force eject program also.
      To those who want just e-mail at bluserver@gmail.com

    • shiv said:

      Please give me suggestion on these topics.
      1.if there is virus named autorun.inf,newfolder.exe in the usb drive.Then please tell me to format usb drive & how to delete these virus.
      2. if i copy some folders from my virus infected pendrive, then every copied folder contain another folder of same name in it
      and it showing size of 603kb.if i open that folder nothing is there.

    • Madhur Kapoor (author) said:

      @Nitin
      Try formatting the USB drive or scanning it with an AV

      @bipin
      Does the drive icon appears when you plug in the pen drive to your computer

    • bluserver said:

      Please give me suggestion on these topics.
      1.if there is virus named autorun.inf,newfolder.exe in the usb drive.Then please tell me to format usb drive & how to delete these virus.
      2. if i copy some folders from my virus infected pendrive, then every copied folder contain another folder of same name in it
      and it showing size of 603kb.if i open that folder nothing is there.

      Hello i think it’s brontok virus. You can use avg 7.5 it well delete that all. don’t use avg 8.0 it’s a crap anti-virus.

    • bluserver said:

      Formatting flash disk is the last option you have. But even thou you format it the virus is spreading because you already open your pendrive and you run it thru autorun.inf so the virus well back again. The safest way to open harddrive, pendrive etc. is not clicking the drive in my computer. Use the address bar above it won’t make the virus run.

    • Jerry said:

      Hi there, i was able to remove that virus in safe mode, so thanks a huge bunch! :-D . Tho now my usb no longer opens the way it used to i.e the autorun pop-up doesn’t pop up when i insert the device into the usb port. Instead it just open the folder on it’s own??? Any idea’s anyone?

    • bluserver said:

      In which you remove the virus? In the system and your pendrive, system only or pendrive only? Removing virus from your pendrive is useless when the virus is still running from your system. Try to remove the virus from your pendrive in non infected PC. Don’t open your pendrive instead go to command prompt. Locate your drive letter type attrib -r -h -s *.* this will show all hidden files.
      Ex:
      G:\attrib -r -h -s *.*
      don’t delete yet the autorun.inf
      type edit autorun.inf
      it will show you the info of the name of the virus.
      Ex:
      [autorun]
      open=asdf.exe
      shell\open\command=adsf.exe
      shell\explore\command=asdf.exe
      so asdf.exe is the virus
      now you can delete the virus name asdf.exe and autorun.inf
      If you are infected of brontok virus you must go to every folder and look fo a look a like folder and point the look a like virus and look for the description in the left if it is application delete it. Well it’s a waste of time to search and delete this virus just use avg 7.5 it will detect and delete it all. ^_^
      Hope this help..

    • SonicUnder18 said:

      Hi Madhur..
      I hav one question..
      My pen drive cannot format..
      The autorun.inf makes my pendrive always working till cannot format… >.<
      Please help me!!

    • Bluserver said:

      Hello Sonic, I think it’s not the autorun.inf causes that you cannot format your flash disk. autorun.inf is not a program it’s a setup information use only to run programs he set thats why it’s called autorun. If you cannot format your pendrive the cause of these is there is a program running from your pendrive or an active virus want to infect your pendrive. To format your pendrive kill all the running programs that came from your pendrive or virus running from you PC because virus have a loop command. You can also format your pendrive in DOS mode using windows 98 fdisk.
      That’s all hope this helps…

    • Sonic said:

      Madhur,
      My pendrive got more virus..
      But I can’t delete it.. it says
      “Cannot read from the source file or disk”
      What should I do to delete it?
      The format problem also not solve yet..

    • Bluserver said:

      Hi again Sonic, You can’t just delete the virus because virus are set to read only and hidden. Using simple commands such as delete or erase it can’t solve the problem. In my case I advice you to use a un-infected PC from virus or clean PC because deleting virus from infected PC is useless if you don’t know what virus you’re dealing with. Plug your pendrive on clean PC and press shift two or three times, make sure you’re using a clean PC.
      Note: Once the computer detected your pendrive don’t open your pendrive.
      There you can format your pendrive.
      “Your PC is infected try to clean your PC”
      Don’t just rely on any anti-virus because the’re sucks!! Anti-Virus rely only to the database what the developer gave them that’s why we need to update them. Try to be an ethical hacker this will solve all the virus problem.

    • Rajneesh said:

      Hello everyone,

      For those not aware, The Right-Click “Open” method to open a Removable drive is no more safe. With a modification in autorun.inf , this method can be forced to run any application used in the autorun.inf file.

      The best option I have been left with to open a USB drive would be
      1. Windows default pop up “What do you want windows to do?” -> “Open folder to view files, using Windows Explorer”. That usually comes automatically when u plug in a drive.

      OR

      2. The Best I believe – Use the “Folders” u see above the address bar in Windows explorer and click on the drive u see on the left pane i.e. the TreeView of the My Computer.

    • Sonic said:

      Thanks for the help Blueserver ^^
      I’ll try to format at clean PC.
      Thanks alot ^^

    • How to prevent/delete/remove virus/spyware/trojan from USB Pendrive - Random Interesting Stuff said:

      [...] : Who is Madhur :hack email, Hack Facebook, hack Facebook password, hack Hotmail, hack Yahoo, hotmail com, [...]

    • Sugumar said:

      very good,

      thanks for this subject

      Thanks

    • ravedar said:

      Hello sir,i used ur technique to remove virus from pendrive but it did not work,kindly give me some new tip on my I D.The virus inside my pendrive are namely New Folder.exe;regsvr.exe & system.exe;
      i will be hoping to hear frm u
      Thank u

    • elaheh said:

      hi
      my cool disk had this virus
      i download this program and install it but i dont know what should i do now?
      please help me

    • Bluserver said:

      Do you have any anti-virus? Co’z this virus is too old anti-virus will detect and erase them. Please reply me if this features of windows will work. ctr+alt+del or task manager, in start menu > run type cmd or regedit. Co’z mostly viruses disable this features to make them hard to get. In deleting virus you should kill the root virus runs from your pc to prevent them from spreading. Thanks i’ll wait your response..

    • netspy215 said:

      hi! tnx der, I owe you, you’re the best.. tnx 4 ur concern about that info…u

    • bluserver said:

      Tip to become the most protected computer from virus.
      1. Download Faronics software Deep Freeze latest version.
      2. Download Windows Installer Ver. 3.0 you might need this later.
      3. Download Net Framework 2.0 or higher.
      4. The last download ArpanTech iKill.

      Setup Tip.
      Before Installing this programs you must have a partition first. Two or more partition.
      Now your change your my documents target folder to any drive that don’t have windows system. Right click my doucments folder and look for target folder and change it what ever you want.
      If you’re done do this. Install first Windows Installer 3.0 if you don’t have, next after windows installer install Net Framework 2.0 or 3.0 if you don’t have. “If you have this programs installed already in your computer no need to install them.” Now if you’re done install ArpanTECH iKill and when iKill finish installing configure it check all box and set 1 seconds refresh time. So the last install Faronics Deep Freeze and freeze only the system drive. Then restart your computer. “Do not freeze other drives for saving purpose.”

      This tip will protect 100% for your PC.

      Right now i am making a program that will protect your flash disk anywhere. I will post it if i’m finish. ^_^

    • bluserver said:

      Ooppss… Sorry im wrong. Right click my documents folder and select properties. In My documents properties look for Target Folder Location and change it for saving purpose.

    • Rufus said:

      Thank you so much! After spending hours with so called “pen drive virus removal tools” your tip worked for me. Kinza.exe is now a thing of the past. Thanks again dude, you rock!

    • poliam_cute said:

      thenkz alot…it really works….

      plz view my blog

      http://www.poliamkowts.blogspot

      thank you!!!!!^_^

    • Neha said:

      Hi, this a very nice solution to remove virus from the UB drive…. Thanks a ton…

    • Neha said:

      Hi, try this it really works. It did work for my USB drive. the solution given above really works…

    • Bluserver said:

      ^_*

    • Bluserver said:

      I developed a program that auto deletes the virus. The program runs as background of windows, when the virus enter to your usb flashdrive it will auto delete and it works fine but the program won’t run unless you run it by yourself. Well there is one thing to run automatically the program everytime you plug your flashdrive. In my case I am using U3 flashdrives. If you like my program please post a reply. Thanks..

    • HINd0rZ said:

      how can u view the files of the USB from the “safe to remove” box?

    • Rushil said:

      Oh my GOD!!! Thank you so much for this post, my portable hard drive kept getting my computers viruses, thanks to your post i deleted them, thanks a million!!!!!!!!!!!11

    • arvind shankar said:

      dude that was awesome… u r awesome man,… fixed my hdd with ur technique… big help bro…

    • Sanju said:

      Hi Madhur – I have a virus called δ<ÉMSDOS.5.0 in my MP3player/USB drive. Please tell me how to remove it. Thanks

    • Nisha said:

      Could u plz send me this program which automatically deletes the viruses

    • Nisha said:

      m still not able to delete autorun.inf using cmd. If I delete it using the given procedures, it again comes
      Plz help me It is really frustrating

    • Nisha said:

      What if I open the USB using ‘explore’ option and disabling the hidden option I copy only the required files. Will it still affect my PC I mean will virus be coppied now?

    • Bluserver said:

      Deleteing virus using command prompt without killing the virus runs in your system is useless.. You can only delete it if all running virus is dead.
      Opening USB using explore option. Take a look of this, this is what virus autorun script is:
      [autorun]
      open=virus.exe
      shell\open\command=virus.exe
      explore=virus.exe
      shell\explore\command=virus.exe
      shelldefault=1

      So using Open or Explore options is wrong!
      Best way to open is use the address bar above.

      If you cannot remove the virus read the blog from the top you can find some usefull there. ^_^

    • Dude said:

      THANK YOU!!!!!

    • Alfredo said:

      usb kingston 8GB is a real shit. The information you save on it, then is altered and lost, so I recommend not to use kingston usb….they are a real shit. My previous usb boston 1GB never caused me problems, but Kingston is a shit, when you save information, you lose it when you try to read this information on another computer….Last 2 hours to save 400 MB from your computer to the memory…kinsgston is extremely a shit

    • Leandro said:

      Hello, I recommend USB PROTECT. remove and prevents the virus from usb. Is the best!!
      download:
      http://www.laesoft.com.ar/descargas/usbprotect.php

    • Bluserver said:

      Is this USB Protect will be install in the PC or in thumb drive?

    • Bluserver said:

      I tested your USB protect but it only delete the autorun.inf but does not delete the virus program. Deleting autorun.inf is preventing only for running the virus from opening the drives. If the virus program is not deleted you still carrying the virus. I recommend use iKill it deletes both autorun and virus. ^_^.

    • Alfredo said:

      To remove virus from the memory usb…istall the FLASH DISINFECTOR program on your pc and run it with the memory usb plugged in your pc. Then you can open the files form your memory usb without any problem.

    • Alfredo said:

      To remove virus from the memory usb…install the FLASH DISINFECTOR program on your pc and run it with the memory usb plugged in your pc. Then you can open the files form your memory usb without any problem.

    • Alfredo said:

      About the kingston memory usb 8GB I talked about it was failed, so I bought a new one. The new one it’s ok. This memories seems to use only for USB 2.0 port, but it shouldn’t damage if you put in previous versions of usb port.

    • Bluserver said:

      Again removing virus form memory stick while the virus is running in your PC is useless. Make sure you don’t have virus in your PC before using those tools. Otherwise it can cause damage your memory stick becuuse you cannot remove it so you will be force to pull it out from your PC. In this case if your memory cannot be removed from your PC
      it’s better to shutdown your PC then remove your memory stick to avoid damage. Mr. Alfredo try use hiren boot cd and scan your 8gb kingston memory stick maybe it can fix it if the damage is not too bad. Kingston memory stick is good to me. Here’s what i can tell you no matter your memory stick is expensive or branded. It depends on how you use it.

    • Bluserver said:

      To fix your kingston try reheat the memory IC of your kingston memory stick or use memory reseter to reset your kingston memory stick IC.

    • Alfredo said:

      The first memory usb kingston 8GB I bought was failed, the information saved losts when I try to open it in another PC or in the same PC. I formated the memory many times. The problem remained the same. The memory was too slow , to save 1GB from the pc to the memory lasted 2 hours and some information was altered and lost. I bought a new memory kingston 8GB, the same model..The information is not lost. The new one works well…it’s not too slow like the first one. But my question is if the memory usb is USB 2.0, can I run the memory in old ports usb?, cause my pc have old usb ports. The first memory usb kingston 8gb I bought maybe was damaged because I used it in old ports usb, but I use old ports usb in this new one and I don’t have any problem. The new one works ok.

    • Alfredo said:

      The first memory usb kingston 8GB I bought was failed, the information saved losts when I try to open it in another PC or in the same PC. I formated the memory many times. The problem remained the same. The memory was too slow , to save 1GB from the pc to the memory lasted 2 hours and some information was altered and lost. I bought a new memory kingston 8GB, the same model..The information is not lost. The new one works well…it’s not too slow like the first one. But my question is if the memory usb is USB 2.0, can I run the memory in old ports usb?, cause my pc have old usb ports. The first memory usb kingston 8gb I bought maybe was damaged because I used it in old ports usb, but I use old ports usb in this new one and I don’t have any problem. The new one works ok. So I want to know if I have to use this memory only in USB 2.0 ports.

    • Bluserver said:

      When you buy a USB you must look first for the compatibility it is written in the case when you buy it. If your computer doesn’t have 2.0 USB port you can buy a PCI USB port 2.0 and install it inside in your PC.

    • Bluserver said:

      Maybe the 1st 8Gb kingston USB you buy have a factory defect. You can change it by claiming your warranty if you have.

    • Richard Thibeault said:

      Some of these tips are nice. especially the removal tips. But, turning off autoplay just forces most people to do an even bigger mistake, double click the drive in my computer. there are actually 5 ways of getting these usb viruses through autorun.inf.

      - autoplay
      - first selection on right click menu
      - double clicking drive
      - u3
      - physically clicking the infected file.

      disabling autoplay actually corrals people into doing the dreaded double clicking of the drive and running a virus. You need to eliminate the access to autorun.inf altogether to thwart the spreading of the virus.

    • Richard Thibeault said:

      I work at a college with 1000+ computers and this usb virus had plaqued us for a short time. Students were walking around infecting machine after machine. The best solution that I have found is from these computerworld blogs.

      http://blogs.computerworld.com/node/12946/print

      http://blogs.computerworld.com/the_best_way_to_disable_autorun_to_be_protected_from_infected_usb_flash_drives

      build a tester to test vulnerability then kill the access to autorun.inf with the reg key. Stop the infection from spreading.
      This does not cure the infection on the computers (that is why these removal tips are great), but it stops the transmission of infection onto any of your computers.

      still this way only stops 4 out of 5 of the possible ways to be infected. You can’t stop somebody from physically running the virus.

    • Danish said:

      Dear. karthick
      when u open commant promt then not type dir/w/a
      1st u enter USB drives Like in my usb drive is I: enter. then u type dir/w/a then see ur in infetcted files then del it

    • Danish said:

      Dear. karthick
      when u open commant promt then not type dir/w/a
      1st u enter USB drives Like in my usb drive is I: enter. then u type dir/w/a then see ur in infetcted files then del it.

    • Anchit said:

      Your method cannot work because i cannot see the folder ts root which has the virus named clock.exe what to do please reply as soon as possible. due to this virus a window automatically minimizes

    • Easy Job Info said:

      My usb card is still broken.

      Anyway, thanks for the info. :)

    • bluserver said:

      Everyone of us have different style to remove those virus. Just don’t stop exploiting. Hehehe..

    • Eson said:

      everytime i plugin my flashdisk to my pc, an exe file is always created on every folder that’s on my flashdisk what will i do

    • Mohamed Rinaz said:

      It was a simply superb method. Thnx Sir.

    • utsav said:

      heyyy that was verrrry nice tips plz send me some more secuity tips

    • Alien_Zombie said:

      Thanx for the tip!

      Also check out PenProtect!It works fine

    • Joey said:

      Mine is similar but the files are in another cd drive THAT DOESNT EVEN EXIST!!!! the files in the non-existing cd drive are… autorun.inf,go.vbe and PKIIntro.doc…I have tried all those tips and non seem to work it always says access denied. Please help also…The virus made my sandisk U3 contour 4gb but when i bought it it was 8gb and I am really weirded out.

    • How to Remove NewFolder.exe Virus said:

      [...] Delete the Autorun.inf and other suspicious exe files from your pen drive using this method. [...]

    • margaret rose said:

      thank you for the very useful tip!

    • rahul said:

      i have another problem. i have pendrive of 8GB which contain some data but i get write protected i don’t know how it get format the way u will provide is unable to del data of drive

    • sgobi said:

      first sorry for my english . this virus is very ” nice” if i may say. it is diferent on most of the computers that i have been on and unvirused them . there is no specific type of delete this virus . most of them have .exe in documents and user\”user” , recycler\ ” some numbers”; root of hdd c:, d:, ans so on . some times i had the simplest problem that i was not allowed to see the hidden files or folders. and the problems kept going . 1) boot in safe mode. 2) log in with administrator ( not other user , sucks if you use the administrator account for casual usage been there done that , so i know) 3) start > run > msconfig and enter , on the startup and services ( here hit hide all microsft …) check for unknown lines 4) unhide he hidden files on hdd. go to the documents and settings \ “what ever is your user name ” and delete all files except the ntuser files . repeat this for every user that is in your docs and settings. 5 ) delete the autorun.inf and any elese *.exe that have some name without a logics. ( trust me it will be obvios) 6) delete the recycler and if it is the case the recycled folders. 9 every time you delete a file or folder use the shift to delete permantli )now you can restart the computer

    • Selma said:

      Very good article but unable to del files from pen drive through command prompt though scan it and files get quarantinned.

    • Pakistani said:

      my symantec detects

      w32.downadup.b in H:\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx

      &

      W32.Downadup!autorun in H:\autorun.inf

      ??? how to remove it madhur?? sorry….your method not working

    • Fredel said:

      How about the FU virus?
      it affected my videocam! what am i supose to do?

    • Anju said:

      Hello madhur, i badly need ur help. My pendrive is infected with virus and every time i plug it in i have to open it through my computer and when i double click on it, it tells me that the disk is not formatted and im asked to format it which i cant as it will delete all my files and my files are really important. Can u help me asap plz???

    • jhoiz said:

      what if the computer has virus and i plug my phone using a usb.. i scan it first then i transfer a files from computer to my phone.. it will infect my phone? if yes.. is there any possible way not to infect my phone when i plug it to a computer with a virus?

    • Bluserver said:

      To anju:

      There is a recovery tool called hiren boot cd it is a complete tool for repairing disk and programs, i use it everytime my flash disk is going to crash to recover my files.

      To jhoiz:

      It depends the type of a virus.
      Yes! and No!
      Yes because If a type of a virus infect an mp3 of jpeg file and your phone have all of those files it will infect your phone.
      NO! because if your phone doesn’t have those files it won’t infect your phone but the virus will spread it will goes to your phone memory and memory card.

    • fsck MS said:

      HOW RETARDED OF MS TO LEAVE SUCH A VULNERABILITY (AUTO-RUNNING ANYTHING MENTIONED IN AUTORUN.EXE). THOSE RETARDS NEED TO BE TAUGHT A LESSON. I HAVE HAD SO MUCH TROUBLE BECAUSE OF THIS ‘FEATURE’

      F.U. M$

    • Desi said:

      Great Madhur

    • Aditya Bhardwaj said:

      Hi i have tried but it shows the message “Access is denied”.

    • Aditya Bhardwaj said:

      Hi ihave done this but it shows “Access is Denied”.. What should I do now

    • 3chofire said:

      U CAN USE THE AUTORUN EATER TO REMOVE AUTORUN.INF

    • AARTI said:

      HI CAN ANYBOBY HAVE A SOLUTION FOR MY PENDRIVE PROBLEM!!
      WHEN I AM INSERTING MY PENDRIVE ITS NOT SHOWING THE AUTORUN DIALOGUE BOX BUT INSTEAD DIRECTLY SHOWING IT IN THE I: DRIVE AND WHEN I AM TRYING 2 OPEN IT ,THEN ITS DISPLAYING A DIALOGUE BOX SAYING “INSERT A DISK IN THE DRIVE” & EVEN IT IS NOT ALLOWING ME 2 FORMAT OR SCAN THE PENDRIVE!!!!!!!!

      CAN ANYBODY HELP ME FOR THS PROBLEM!!!!!
      THANKS ALOT

    • Ian L said:

      Thank you very much for this fix – I had 3 USB pen drives all with the same issue. Each one had autorun.inf and MicrosoftPowerPoint.exe which were trojan and have now been removed. Great advice!

    • Ian L said:

      AARTI:

      I have a feeling the pen drive has to be assigned to drive letter E: or F: to be recognised. Howvere I could be wrong on this. What is using E: and F: on your machine at the moment?

    • Raj said:

      Hi All,
      Can any one tell me how to remove some files infected in my USB Drive.

      05/14/2054 10:09 PM 2,594,347,673 UUUUUUUU.UUU
      01/16/1990 09:14 PM Ăż(8
      09/16/2013 07:23 AM 3,159,249,262 â•h♦ô►Ç@Ă„.♀uâ©
      09/21/2057 12:32 PM ╖▼╔ö⟠╬╙.óF↑
      09/25/2045 01:42 PM 574,265,265 âż]UΦ+-(w.p♂±
      3 File(s) 9,652,055,336 bytes
      2 Dir(s) 4,015,681,536 bytes free
      if i try to delet this above files i get a error message Disk is Write Proctet.

    • Ash said:

      Simply download Autorun Protector to analyze, remove and protect USB Virus problem, in addition, it can prevent your PC & Device from infecting with USB Worms. Click for more information.

    • Ash said:

      I have trouble using the HTML Code below, the link is http://raylin.wordpress.com/downloads/autorun-protector/ .

      Testing HTML Code.

      Download from

      More information

    • Ramsay said:

      Hi
      I’m using avast antivirus in my laptop.I’ve a pendrive which consists of the virus file “Autorun.inf” and a malware “BV:AutoRun-G [Wrm]“.I’ve applied all the ways like disabling the autorun feature,using the Tweak s/w,freecommander s/w,using the command prompt to crack the virus in the pendrive.I got rid of it.When I changed another pen drive, the same virus entered in that pendrive also.
      I’ve applied all the above mentioned ways to remove the virus from pendrive.

      So, I request, can anybody help me in this regard!!

      Thanks in advance.
      Ramsay

    • HEMANT said:

      Nice suggestions. Thanx man and i like the way to explained everything. hats off to U

    • name said:

      hey dude…my computer and pen drive was invaded by ahsan’s virus firs thing i did is to format both of them my pc was successfully remove all the element of ahsan but through formatting but on my pen drive that ahsan virus still existing. how can i clean this sticky virus that stocked on my pen drive please help me.

    • miller said:

      http://dotnetprojects.webs.com/diskantisecurity.htm
      use this software for pendrive viruses 100% detects and removes virus from pendrives and no updates required + its free

    • martin said:

      to deal with pendrive virus you must have an antivirus which is ment for pendrives i have 1 in mind for you and it needs no updates + 100% detects pendrive virus or usb drive viruses,the antivirus name is disk anti security you can get it from the below link and its free and full version,just download and install

      http://dotnetprojects.webs.com/diskantisecurity.htm

    • u r idiot said:

      Hey u big idiot. How can u delete a autorun file it is being used by a process (here for virus), any virus must not be using FILE_SHARED_WRITE and FILE_SHARED_READ. The file must be hard locked. FILE_SHARED_WRITE and FILE_SHARED_READ???new to u?? Go refresh ur stinking knowledge, they r from native WIN32. I hope u atleast know that. And u big dumb madhur, viruses and malwares can easily bypass ur security measures, even i can. Go refresh your info about. Application Injections and Hacks, Dll injection (u cant stop that, u dumb), Service, and the one that will be over of ur fucking head for years even if u know that will be a virated Mass Storage Driver.CAN U STOP THEM???BUT I Can. I have no antivirus installed and I have no virus.

      YOU ARE TOO IDIOT IF YOU ARE ON THIS WEBSITE! This may workout for easy and idiot users. but it is darn incompetent in REAL WORLD!

    • sham said:

      the person above me who is calling the admin idiot is a big foolish idiot as he is just a user of computer who believes he is smarter then virus programmers,autorun.inf will not be locked by a process until its revelent virus is installed or injected in an computer,this page is providing an idea how to avoid installing(infecting) virus to a computer,so the idea is process does not start automatically,just remove autorun.inf from pendrive will remove link to virus file and upon next use of pendrive your computer is safe and no process starts

      people should respect the information others are providing,if happy with other antivirus(as they say thier computer is clean,i hope it is)WHAT THE HELL THEY ARE DOING HERE?

    • rajpal chouhan said:

      There is a draw back in using command window that it does not execute any command having space in it. Hence when we write this command â€H :\>Del New Folder.exe’ because of space between â€New’ and â€Folder’ command window is unable to recognize and execute it.

    • Eduardo said:

      a Tip, when changing the attributed of these units, make sure to run the attrib -r -a -s -h also in uppercase, e.g. attrib -R -A -S -H this will reveal more files…

    • ian said:

      is this applicable with virus – RECYCLER?

    • Adelino said:

      I have a similar virus although in my case the autorun.inf can’t be opened or removed. Windows says it’s in use. Also the first time it appeared I couldn0t find any executable but I noticed a executable process runing with the name of my login. THE ONLY WAY TO REMOVE IT WAS strart the pc in safe mode typing start->run-> msconfig and looking for unknown starting processes in my case fernando.exe wich was my username. After searching for it I found it in my user folder (Documents and Settings\Fernando) I had to remove the option “hide windows protected files” option available in windows explorer menu tools and folder options. Then I deleted autorun.inf from the pen along with another copy of the virus found in recycler folder. If you have any doubts contact me adelinojoc@iol.pt

    • J said:

      Thanks guys you really saved me a massive head ache

    • Abhishek said:

      Really a good article. My pen drive was infected with some virus and was not allowing to format it. I used the free version of AVG to scan it and now the drive is working fine.

      Thanks for the post.

      Regards,
      Abhishek
      Rishikesh

    • How virus come from pen drive ? said:

      [...] follow info on each page The last link has an app that you can run to remove it through software How to remove Virus from USB Drives Autorun Virus Removal – How to Remove Autorun Virus in Minutes | Raitucarp Magazine Autorun Virus [...]

    • Sonic said:

      Hello Folks!!

      Finally!!
      I have get the useful software to prevent from Autorun.inf infected to you USB or you system.

      The software is called GEEKZ Virus Remover.
      This software can block Autorun and remove Autorun.inf from your USB
      or your system.
      This system has been tested by myself, and it works on Windows Xp.
      ~Sorry, I did not test yet on Vista or other Windows~

      Here’s the link to download this software.
      http://www.mediafire.com/download.php?kwjdmzmlo2j

      Happy Trying!!
      Any problem, please post your problem at my email..
      > hazim93_zim@hotmail.com
      > sonic_underground2@yahoo.com

      ~Please do not spam~

    • Nandita said:

      Hello,

      I tried the windows version of it which is in the comments, and it worked fine. Thanks a lot.

      Nan

    • Mark T said:

      I personally use USB Threat Defender. They claim that it has a unique technology(Proactive + Definiton scan) which not only prevents USB viruses from spreading but also detects and removes exisitng viruses from systems which not even the best Anti-Viruses can detect. It also fixes damages done to system.

      Disabling AutoRun or using a AutorunVirus remover wont help
      Read here: http://www.arzoosoft.com/usbthreats.html

      All my office computers have this insatlled and it does a great job.

      I recommend this to everyone for home and office.
      http://www.arzoosoft.com/utdefender.html

    • mix_an said:

      naevius usb antivirus deletes usb-pen viruses:)

    • Bluserver said:

      To Rajpal Chouhan,

      I think the virus use a special character to make it hard to delete. When you say of space between â€New’ and â€Folder’ command window is unable to recognize and execute it. Maybe you try this one ‘H :\>Del NewAlt+255Folder.exe’ Alt+255 is a special character it looks like a space.

    • Sonic said:

      Thanks Mark, I’ll try it..
      The GVR works fine to me..
      But I wanna my computer become safer..

      You all know that virus nowadays become modern, till hard to remove it..
      Yikes I hate that!!

    • Jungbaekang said:

      It was very helpful. Now my USB is cured and I can plug it on my computer comfortably. Thanks.

    • Hannah said:

      This was invaluable information, after I got a virus on my usb stick which I used to help clear a virus from their computer I was almost going to re-format it but the clear and helpful advice you posted was just what I needed.

      Thank you for sharing :)

    • nicole said:

      will this remove only the virus or all the files in the usb?

    • Sonic said:

      One more thing about re-formating pc..
      Do not make backup on your file that infected with virus or other spyware/adware/trojan..

      This will cause your pc getting crash again after re-format pc and use the backup one.
      If you want your pc become more safe, I suggest you use Avira AntiVir.
      This anti virus will delete all trojan/spyware/adware or virus..

      Some anti virus did not detect some program as trojan or spyware..
      I have a program patch that Avira will detect as Trojan but other anti virus did not detect it.. I’ve already try it with AVG and Kapersky.

      I need more information about computing.. If anybody can teach me some,
      please tell me okay..

      Here’s my email, if you volunteer want to teach me..
      hazim93_zim@hotmail.com

      Thank you if you help me..

    • Emmanuel Dawat said:

      how can i remove iostream.exe and autorun.inf virus pleas help me my usb has it virus
      everytime i use a pc its always reboot after i insert my USb. huhuhuhu please help me i tried these tips but nothing happen the file i wanted to delete is still there i use command prompt and avg antivitus even prevx pls HELP ME ASAP….. tnx

    • rapidshare search said:

      It was very helpful. Now my USB is cured and I can plug it on my computer comfortably.

    • Prakash vijayvergiya,jaipur said:

      Hi
      please provide tips for removing virus from laptop in windows xp
      due to virus my lappe is very slow

    • miyah said:

      hi, where can I find the “comand prompt” by typing ‘cmd’? I cannot proceed to the instruction becuase I don’t know ehere I am going to start. I got “win32 usb service” in my usb and it hidden some of the siles that stored there. Please help me. thanks

    • miyah said:

      hi, where can I find the “comand prompt” by typing â€cmd’? I cannot proceed to the instruction because I don’t know where I am going to start. I got “win32 usb service” in my usb and it hidden some of the files that stored there. Please help me. thanks

    • miyah said:

      Sorry for the inconviniece, I didn’t able to type the words correctyl but sure you can understand the message… I tried to correct the words but it has been detected by the server and avoided it to accept.

    • Sonic said:

      =====================================================================
      Disadvantage of using AVG Anti virus & AVG Internet Security
      –>If your pc RAM is lower than 512Mb<–

      ¤ Slow startup run
      ¤ Slow loading files/folders
      ¤ Scanning too long [about 1hr 30min ~ 3hr]

      If you want AVG Internet Security full [plus 3 choices]
      • Internet Security + Firewall
      • Anti Virus + Firewall
      • E-mail.. (I don’t know what it named) + Firewall

      I can give you. [Full license 28/02/2018]
      But I need some time for uploading the installer..

      =====================================================================
      Disadvantage of using Kapersky Internet Security

      ¤ Slow starting application
      ¤ Slow loading installer [sometimes can hanging about 1min]

      =====================================================================
      Disadvantage of using Avira AntiVir (any type of Avira)

      ¤ Some program will detect as Trojan/Ad-ware.

      *Solution if want run detected program*
      1. Close Avira Guard
      2. Run the program
      3. After done, close the program
      4. Open Avira Guard.

      *Do not leave Avira Guard close for too long, this will cause Avira will not work anymore if not open back Guard..
      You will need re-install back if this happens*

      =====================================================================
      What I write is based on my experience..
      I just wanna share my experience at here…

      Sorry cause my text out of this topic..

      Anyway, if want AVG please contact me..
      •hazim93_zim@hotmail.com

      Those who are using GEEKZ Virus Remover (GVR),
      thanks for using!

    • annum said:

      try to install linex in your system and then remove the virus from the commond prompt .

      http://www.freeutube.org – donot open it .

    • kamalakar said:

      Hi
      This is kamalakar from hyderabad i am getting the problem from USB/PEN DRIVE how to remove from pen drive virus aotometically with out scaning (R) it should not to dectect the pendrive when in this virus why means some of virus R giving me a so probleam i am formating mine pc number of times to this type of problems plz help me

    • amit kumar yadav said:

      my pendrive viruses are not remove as according to your method. the wiondow of run is rapidly closed when i enter the command also when command is enter then it not remove viruse please help me.

    • Albin Sebastian said:

      Hi all ,

      Microsoft released patch to prevent this virus :
      Apply to your PCS ..

      http://tec-updates.blogspot.com/2009/09/autorun-virus-fix-microsoft-patch.html

    • Sreevartsan said:

      Thanks for the tip :)

    • ashok said:

      which antivirus is best to remove viruses from USB derives.

    • dabeer said:

      man ur the best ive been trying to delete the virus i cant beleive it man yo it had all my saves and reports and every thing how r u so smart bro?

    • Kenny said:

      gosh… it doesn’t work!!!!

    • hitman said:

      i Wont to format my flash but windows dont want to. He said “Please insert a drive into Removable disk (G:)” He is also hidden, he also dont want open. Can you please help me!!

    • Manoj Kumar said:

      MY COMPUTER DRIVE DOES NOT SHOW ANY VIRUS WHEN I USED THE ABOVE TIP. BUT WHEN I USE NERO TO WRITE ANY CD FROM MY COMPUTER OR USB DRIVE. IT SHOWS THE ozwze.exe & autorun.inf VIRUSES IN MY DRIVES. BUT WHEN I RUN MY COMMAND PROMPT USED EACH AND EVERY STEP MENTIONED ABOVE BUT DOES NOT WORK AT ALL OR WHEN I OPENED ANY DRIVE IN MY COMPUTER IT DOES NOT SHOW THAT VIRUSES, BUT I HAVE SEEN IN HIDDEN FILES, THE SAME PROBLEM.

      WHEN I INSTALL ANTIVIR ANTIVIRUS IN MY COMPUTER IT SHOWS ONE ERROR C:/DOCUMENT & SETTINGS/MANOJ K/LOCAL/TEMP/SETUP.EXE NOT FOUND.

    • siraj ( don ) said:

      dear guys in web.

      I had logged in to your website short while ago it was very marvelous and handled easy too, i would like to deliver my comments via on this web in the near future.

      Thank you……………………….

    • peter said:

      as soon as I try to delete regsvr.exe , I get a little window message down the bottom in the taskbar saying “cmd.exe – Corrupt File – the file or directory \regsvr.exe is corrupt and unreadable, Please run Chkdsk utility.”

      So whats that ?

    • Yaseen Noorani said:

      How do you know which ones are the viruses after you have entered the command attrib -r -a -s -h . Please tell me

    • vineela said:

      Hello

      Can u please give me some idea about how to remove README.txt virus from my pendrive which is still coming after deleting the file from command prompt…

      please give me suggestions.

    • mez said:

      help me to remove the bitch “Autorun.inf” on my USB please….
      thank you

    • mez said:

      please give me a new steps in removing Autorun.inf on my USB 4g, b’coz those step above is not working.Still the Autorun.inf is there.If I open my USB the Autorun.inf and then like a buble it will gone then it will come back…..HELP….

    • Rahul said:

      Thanks!!!
      Your software worked great!
      God bless u!

    • Ricky said:

      Thanks. very Nice Post.

    • Bluserver said:

      Good new I have developed a USB anti-virus. It scan your whole USB stick when it is inserted into your PC. I named it USvIrus Scan. It has his own AV scanner from a2squared emsisoft company and a USB detector.

      USB detector works when your USB stick is inserted and call the AV scanner to scan your USB.

      This is not just like other USB anti-virus that scan only in the root of your USB stick. This anti-virus scans folder and sub folder that was stored in your USB stick. Because now a days viruses infect also the folders and subfolders.

      This anti-virus can scan also your whole computer and have a Virus Signature updates from emsisoft virus signature server. What I mean is this anti-virus needs to be updated just like professional anti-virus do.

      I am testing it now but I’ve not shown it yet to the public because it is under observation for the license to activate once it is expired. Because I am making this program as a shareware.

    • aki said:

      thanks for the tips bro!
      if the pen drive is infected with autorun virus then we cant format it,
      by running the sysytem in safe mode we can easily format the pen drive.

    • Bluserver said:

      Tips of removing autorun.inf using command prompt. Other option than safe mode.

      1. You must make sure that your computer is not infected. “If infected you must kil the virus process in task manager if you can find it or else your removal plan of autorun or virus in your pen is useless.” Finding virus process is really hard to do if the task manager is block or your a newbei doing this. The other option scan your pen in any anti-virus that is updated to the latest virus signature.

      2. Click start select Run.
      3. In run windows type in CMD. ” a command prompt will appear.”
      4. Locate your pen drive letter. The command prompt window will appear with default folder destination.

      For Ex: C:\Documents and Settings\Bluserver> “this is the default of my computer”

      5. Just type in the letter of your pen drive assign by your computer followed by a colon.

      So it’s look like this if my pen drive letter is E “C:\Documents and Settings\Bluserver>E:” then enter.

      The effect of this is the dos prompt goes to drive E and it look like this “E:\>” this means that you are in your pen drive.

      6. Mostly autorun.inf is place in the root in your pen drive. So E:\> is the root. Just type in under the root prompt of your pen drive “attrib -r -h -s then the autorun.inf file” this will change the file attrib from hidden to unhidden. -r read -h hidden -s system.

      So it’s gonna be look like this “E:\>attrib -r -h -s autorun.inf” then enter.

      If you went right autorun.inf will be showed up but not yet. Don’t open your pen yet because you haven’t delete the autorun.inf.

      7. So all you have to do is type in erase or del autorun.inf” It will be like this “E:\>erase autorun.inf” then enter.

      So you’re done you can now exit command prompt. But you cannot open your pen because explorer cannot find the autorun.inf all you have to do is to eject your pen and insert it again. So that’s it.

      This is just how to remove autorun.inf this is not how to remove virus from pen. There are steps to remove virus from a pen.

      AUTORUN.INF is not a virus it’s an information file which locate a specific program scripted on it. A real autorun.inf is it’s script written inside is readable. The fake autorun.inf is which those EXE converted as INF which the script inside is unreadble and hard to understand.

      Sorry for the bad english hope all of you guys understand it. ^_^

    • Your Computer / IT related questions - Page 114 - Snehasallapam said:

      [...] remover. providing a link below which can be used in normal drives also to remove issues. How to remove Virus from USB Drives COMPUTER TRICKS: How to remove Virus from USB Drives __________________ Njan Avan Thanne, [...]

    • Bruce NZ said:

      Yet another way of removing virus files from USB pen drives -

      If you have access to a Linux computer put the infected drive in and you will see the virus files, even those invisible to Windows. Delete them. Some may be read-only but you can change this with the properties/permissions dialogue.

    • bluserver said:

      Yup another option is using linux. Windows Virus can’t run linux except if the virus design for linux.

    • Reicheru said:

      Thank You Thank You Thank You~!

      It totally worked and my flashdrive is clear! I wish I could hug you. lol

      Thanks a lot man.

    • Sunitha said:

      Hi there,

      I am not convinced by the solution that you have given, because I tried the above mentioned steps and even then I could not remove autorun.inf. Actually I have got an .exe file called dsncb.exe, that gets executed every time.After following the steps as told by you, if I again try to open the autorun.inf file, it just pops up. It is reappearing….

      Please help me to get rid of this problem.

      Thanks Bye….

    • bluserver said:

      You can’t because the virus infect your PC. Once the virus infect your PC the above instruction is useless. You must kill the virus running inside your PC before removing your autorun.inf and virus in your pen. Because removing autorun.inf and virus in your pen while the virus is running in your PC is not possible. The virus well back and back again it loop itself base in the virus script. Now my question is do you know how to kill the virus running inside your PC? Once the virus is accidentally run by user it infect automatically in your PC. If you don’t know how to kill it manually the best option to kill the virus inside your PC is to update your anti-virus and scan it. “Un-updated anti-virus is useless..”

    • Shailendra said:

      hi

      thanks a lot

      great job man

      my problem is solved by this

      u r great man

      thanks again

    • Bluserver said:

      Removing virus in your pen, the same procedure in removing autorun.inf in your pen as I post above.

      If you don’t know the name of the virus in your pen you can show it by using edit command.

      Before you delete the autorun.inf using command prompt. Just type in “yourdriveletter:\edit autorun.inf

      It will show like this

      [autorun]
      open=sample.bat
      shell\open\command=sample.bat
      shell\explorer\command=sample.bat

      So the virus name is sample.bat

      Exit edit. Click File>Exit

      There you can delete autorun.inf and sample.bat using the same procedure on how to delete autorun.inf above.

      Remember removing virus in your pen while the virus is running inside your PC is useless.

    • Mike said:

      Hey this looks very useful. But in my case, my flashdrive has the virus as the autorun.inf file. whenever i try to delete it, im unable to b/c of it is running in another program or whatever. the tweak UI looks like i could use that but it says its not compatable with my comp. (windows vista basic) anyone have any suggestions?

    • bluserver said:

      Do you kill the virus or the infected program running in your PC?

    • Mike said:

      well flash drive is clean now and im searching the computer, if anyone has any advice feel free to share. (i know not to plug flashdrive back in too)

    • Ramakrishnan said:

      Dear sir,

      I tried opening the command prompt as you suggested, but it refused to open. A boot scan revealed worm/autorun.ini in the pendrive. But my anti virus software i s not able to delete it. I delete all files on my pen drive to find that a certain Word document “True_Love” reappearing each time i delete it. Please help!!!!! Now each time i plug in a new pen drive this file appears in that pen drive also.

    • bluserver said:

      If the command prompt refuse to open this means that the virus put an entry key to registry to block the command prompt to open. HKCU or HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System > DisableCMD if I’m right. And thsi means your PC is infected. If you cannot open command prompt you cannot open regedit and Task Manager either. The best you can do is to boot up your PC in safe mode or use ERD commander Boot CD to freeze up windows and delete those virus from your computer and USB Stick.

      What anti-virus did you use? I use Kaspersky Internet Security Monthly Key activated, USvIrus Scan 1.7.2 for auto full scan USB stick when inserted and USB Threat Defender to scan autorun.inf from USB stick.

    • Marcos said:

      Hey, thanks I now cleaned my Flash Drive. Something my anti virus couldn’t do…

    • Abhilash said:

      hmm actually i have a virus wid my external us hard drive…. some virus attack .. when i try to delete the particular folder ..its giving the msg .. cannot delete USBCP[]wa…. and bcoz of which i m not able to play any of teh movies and stuff…..:( :(
      Can any1 help me??

    • Bluserver said:

      I think it’s running in your PC and you cannot delete it because it’s been use by your computer. If you think this is the virus you must kill it via task manager or command prompt if this tools is accessible and been blocked by the virus.

    • Pratyush singh said:

      ah well right now m completely pissed off with .exe virus which is fucking my sandisk cruzer micro 4 gb pendrive. even after formatting the pendrive like 100 times the virus is still there n whenver i plug in the pen drive my avast anti virus says caution there is a virus . my ass srry for bad language but m really frustrated. i have downloaded many antivirus tweaks softwares n all that shit. but this virus is not removed. plz give a solution to it. i need my pendrive for various purposes. this virus probelem was started when my friend gave me some songs and a game from his pc i scanned it at my pc b4 installing them any but no viruses was founf so i installed but after 2 days my pc got fucked up and a folder.exe virus caught my pc since then{after 5 months LOL }still this virus problem has not solved now a new type of virus is my pen drive {autorun.inf recycler.exe } please yaar agar kisi ko yeh problem solve karne aati then plz mail me at golurocks2007@rediffmail.com .any help would be appreciated

    • Bluserver said:

      A little advice on how to aware and get rid of new folder.exe or virus that looks like folder.

      How to know them that they are virus.

      1. Click Start > Run type EXPLORER
      2. In explorer click Tools > Folder Options
      3. In Folder Options > General
      “Make sure that Click Items as Follows is set to Double click to open an item.”
      4. In Folder Options Click on View.
      5. Uncheck Hide extensions for known files.
      “This makes the file extension appear in every file”

      With this you can see that the look alike folder virus is an exe file.

    • health problems said:

      Uninstall the horrible virus named Norton anti-virus and get Kaspersky or BitDeffender, right click on the drive and say scan for viruses, if there really is one(norton will fake messages to get you to buy\renew your license)BitDeffender will delete it instantly and Kaspersky will ask if you want to block it, delete it, quarantine it, or allow it.

    • Hardik said:

      hi,

      as shown i tried to remove autorun.inf file from my 4GB pendrive but when i try to delete it from cmd prompt it gives the msg this file is being used by another user. So, tried many times from the start but still it shows the same msg. How to remove this file from my pen drive… Waiting for ur reply…

      Hardik Patel (Vapi)

    • Hardik said:

      hi

      well i tried to remove the autorun.inf file using edit option but it shows error like “unknown error while processing, error32″… is there any solution?????

    • Arya said:

      I tried this, but the virus is so strong, that no matter how many times i try to delete it, it just says, “cannot detect file”. What should i do? the name of the file is ‘iph.exe’

    • Hardik said:

      what is “tmp”??????? every time i remove this file it comes again to my pen drive… the icon of the file is like recycle bin… hw to remove it forever???

      Help me out >>>>> Soooooooon

      Hardik

    • Matthew said:

      hey guys, i have already tried that way of removing viruses..,but instead removing only the virus, it also removes my files..,i got into trouble when i used that..,is there any other way on which i can remove usb virus without deleting my infected files.?

    • hemant said:

      the tip was really helpfull…thanks
      so what have u studied, are u an indian

    • hardik said:

      hi
      to whom u r asking hemant???

    • Bluserver said:

      Hardik is it a filename or file extension name?

      If extension name tmp means temporary.

      Matthew as what I have said you cannot delete either the autorun.inf or a virus while it is use or running in your computer. Before you delete it you must check 1st your computer if it is not infected. You cannot delete it while the file is used. To kill it use task manager or command prompt using tasklist and taskkill command to kill it.

    • hardik said:

      hi

      as i asked u that tmp is a file not an extension….

      and i already scaned my computer and checked for the viruses and there was no virus found…. and as u said to use the tasklist or taskkill cmnd to kill the file… so pls tell hw to do it????? and really thanks for ur reply….

    • Bluserver said:

      What Anti-virus you used? Is it updated?

      Removing harm/harmless virus using CMD is not easy. The easist way is to use Task Manager and look the name of the virus and kill it. However if your task manager is blocked you will use CMD.

      Just click Start>Run type cmd.
      In command prompt type tasklist hit enter.
      There you can see all running programs in your computer.
      Make sure you know the name of the virus.
      If you find the virus type in taskkill /IM virusname.exe /F hit enter.
      Make sure IM and F is capital.

      There,, hope you can fix it.

    • Karthik said:

      CHECK MY BLOG ON HOW TO REMOVE AUTORUN ANTI VIRUS FOR DETAILED STEPS HERE: http://dtechwiz.blogspot.com

    • Sandy said:

      oh i thank you very much i needed this help

    • Zaid Khan said:

      Thanks mate, really worked, turns out autorun.inf was the culprit. Cheers.

    • Bluserver said:

      Use USB Treat Defender or USB Autorun Remover to aware autoruns and virus.

      This tool is can remove virus who have autoruns, but they cannot remove virus who does not use autoruns.

    • Karthik said:

      Check out my blog on how to remove any virus from your PC.. All steps have been explained clearly : http://dtechwiz.blogspot.com/2010/01/how-to-protect-your-pc-from-viruses.html

    • Eshwar said:

      Hello fren,

      I tried ur procedure but unable to delete autorun.inf. says the process cannot access the file because it is being used by another process. When i checked dir /w/a autorun.inf is showing in filesystem. please help.

    • euphmum said:

      I just can’t get rid of Svchost.exe does this matter? I delete it but somewhere there is another bit of virus reinstalling it. Help

    • Edem Adjei said:

      the thing naah it does not work

    • Christy said:

      I have the windows defender virus on my pc thanks to my teenaged son. when I copy my documents to my sandick cruzer a system folder pops up with all kinds of .exe in it… I’ve deleted it but it keeps coming back. Also a large sandisk icon on the bottom left hand corner appears on the desktop. Is this a sign the win. defender virus is attaching itself to this flashdrive? Help

    • Bluserver said:

      If the exes still coming back it means there’s a virus inside your PC infecting every drive on it before the windows defender installed. In this situation windows defender is useless.

      About Sandisk cruzer icon it is normal to appear when the pen inserted. It stands as a start menu of your pendrive.

      Read the comment above on how to remove.

      To all cannot get my example on how to remove virus using command prompt you need to study about windows, how they works, how they hack, how they made so that you may understand the flow of it.

    • Karibu said:

      I use a small software called USB Drive Fresher to get rid of unwanted files, this programme cleans up the pendrive when inserted.
      Like thumbs.db, or .Trashes folder, or .Spotlight-V100, or the ones with the underscore at the start of the name. From windows to Mac and back to windows.

      You can try it out at:

      http://www.affinity-tools.com/usbfresher/

    • Christy said:

      thanks…

    • John smith said:

      latest antivirus i hav used is NavyAtivirus[USB security system…it protected my computer from usb viruses like blastclnn svchhsot.exe recyler…..etc an soo on..ir protects your compter from autorun.inf and can repair your computer also
      click http://shivabhusal.freevar.com/navyav.zip

    • Bluserver said:

      The link is dead bro.

      Let me try if this program is uses a real av-scanner.

      If doesn’t it’s useless bro.

      Why does anybody have a problem of autorun.inf file?

      Autorun.inf file is not a virus it’s a configuration settings to a file to make it run auto that’s why it is called autorun.

      Let me show what autorun.inf most common script for viruses.

      [autorun]
      open=virusname.exe
      shell\open\command=virusname.exe
      explore=virusname.exe
      shell\explore\command=virusname.exe

      As you can see there is a virusname.exe, so! it’s means that the autorun script calls virusname.exe virus. What I mean is your better git rid of virusname.exe not the autorun.inf.

      If the virusname.exe is removed from your pen, autorun.inf is useless and won’t work. Hayzzzzzzzzzzzzzzz…. MEANS THE VIRUS WILL NOT WORK. LOL!!!

      The problem is if the virusname.exe is removed but the autorun.inf is still in your pen you cannot open your pen via double click your mouse. The solution for this is to open your pen via address bar above or delete the autorun.inf from your pen and unplug it from your PC and insert it again.

    • Shakir said:

      Salam to All
      I’ve one more method which as follows:
      1. When you insert USB, press Ctr + Shift to disables the autorun
      2. Then right click on Start menue and click “Explore All Users”
      3. Then Click on Tools and then click on “Folder Options”
      4. And then Click View and then click on Radio button under “Hidden Files and Folders” Show hidden Files and Folders and also unchecked the below to First one is Hide Extension for Known File Type and Hide Protected Operating System Files (Recommended). Its gives you Option Click Yes. and Proceed.
      5. After this go to the USB through explorer. Do not click it directly on USB, it will infect your PC.
      6. Then to be on Safe side, right Click on Virus exe. Files and Folders. and then click Shift + Delete to delete it permanently.

      Regards,
      Shakir Afridi

    • Hardik said:

      Hi every one…

      Madhur u were talkig abt the program u developped… whats that????

      Give me some link to use it… Ur words r as below…

      “”I developed a program that auto deletes the virus. The program runs as background of windows, when the virus enter to your usb flashdrive it will auto delete and it works fine but the program won’t run unless you run it by yourself. Well there is one thing to run automatically the program everytime you plug your flashdrive. In my case I am using U3 flashdrives. If you like my program please post a reply. Thanks..”"

      For USB Drives…

      Thanks

      Hardik Patel (Vapi)

    • Hardik said:

      Hi,

      Actually i’ve another prblm with my pen drive that i occationally use pen drive to play some music with my DVD player… bt from last day i’m unable to use it… whenever i insert the pen drive to my DVD player it shows the massage with an error… i forgot the error name it was just like “NO VALID FILE” or something like that… so tell me what shud i do with that????

      Is it b’coz i deleted autorun.inf or else…..????

      Hardik Patel (Vapi)

    • Sarah said:

      Thank you so much! This really really solved my problem! thanks again :)

    • Monina panget said:

      dis tip is great it becames big help 4 us ty:D

    • Rana Aqueel Asghar said:

      hi everyone
      i have a problem with my player
      when i connect it to pc it does not open the usb but gives error

      E:/access is denied

      Access not possible

      but when it open it contains a file named in capital letters (SE)
      and my pc jams unless i remove the USB i can not add any music file because of this

    • monica said:

      Thanks this helped a lot!!!

    • raj said:

      my pen drive has hidden file created named”maksimalno” and “puce” and they are creating the problem of non detection of pen drive after sometime, but my antivirus is not able to detect the virus anybdy has any idea how to remove it??

    • GRACIAS said:

      you are a lifesaver…LIFESAVER!!!!!!!!

    Leave your response!

    Add your comment below, or trackback from your own site. You can also subscribe to these comments via RSS.

    Be nice. Keep it clean. Stay on topic. No spam.

    You can use these tags:
    <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

    This is a Gravatar-enabled weblog. To get your own globally-recognized-avatar, please register at Gravatar.