How to remove Virus from USB Drives



One of the ways by which a virus can infect your PC is through USB/Pen drives. Common viruses such as ’Ravmon’ , ‘New Folder.exe’, ‘Orkut is banned’ etc are spreading through USB drives. Most anti virus programs are unable to detect them and even if they do, in most cases they are unable to delete the file, only quarantine it. Here are the things which you can do if you want to remove such viruses from your USB drives

Whenever you plug a USB drive in your system, a window will appear similar to the one shown below

USB

Don’t click on Ok , just choose ‘Cancel’. Open the Command Prompt by typing ‘cmd‘ in the run box. In the command prompt type the drive letter: and press enter . Now type dir /w/a and press enter.

This will display a list of the files in the pen drive. Check whether the following files are there or not

  • Autorun.inf
  • Ravmon.exe
  • New Folder.exe
  • svchost.exe
  • Heap41a
  • or any other exe file which may be suspicious.

If any of the above files are there, then probably the USB drive is infected. In command prompt type attrib -r -a -s -h *.* and press enter. This will remove the Read Only, Archive, System and hidden file attribute from all the files. Now just delete the files using the command del filename. example del Ravmon.exe. Delete all the files that are suspicious. To be on a safer side, just scan the USB drive with an anti virus program to check whether it is free of virus or not. Now remove the drive and plug it again. In most of the cases, the real culprit turns out to be the “Autorun.inf” file which mostly gets executed when someone clicks Ok in the dialog window which appears above. Thus the infections can spread

Security Tip

Disable the Autoplay feature of USB drives. If you disable the Autoplay feature of USB drives, then there are lesser chances of the virus spreading. A tool which can perform such a function is Tweak UI. Download it from here install it.

Tweak UI

Run the program. Now you can disable the Autoplay feature of the removable drives as shown above. By following the above steps, you can keep your USB drives clean. If there are any other methods which you use, then share it with me through comments.

495 Comments

  1. SAlman says:

    Best and Easy to remove USB Virus !
    Just Download Freeware Software (SMADAV 2011)

    Download Link :http://www.smadav.net/

  2. maxrexfax says:

    To stop USB virus- 1 unmount HDD, 2 turn on view of hidden files, 3 mount usb drive and check it. How to do it? Top secret!

  3. Fab says:

    i had only one file on my camera which was the DCIM which was turned into a shortcut (at this time i could still open the photos) when i turned on the hidden files i found RECYCLER which i deleted, but now the shortcut can,t open cmd anymore, (which is good right) but now i deleted that shortcut DCIM i can,t find my photos anymore, they do show up on the camera, any idea how to get them back on computer and is my sdcard now virusfree?

    does this make any sense?
    thanks in advance

    fabian

  4. LADDI says:

    HELLO DEARS I M BACK
    IT IS A NOT A VIRUS ITS A PROGRAM FILE LIKE A IN WICH COMPUTERS MANY FILES YOU ANY ONE USB PEN DRIVE IN YOUR COMPUTER ANY MOBILE CAMERA MMC IN YOUR COMPUTER AND ONTHER FRIEND COMPUTER CHEEK IT
    ((((DO NOT OPEN PEN DRIVE A NEW PC OK PRESS SHIFT BUTTON IN PEN DRIVE PLUG)))) MY LAST COMMENT SITE UP LOAD NERO VERSION PLEASE TRY IMPOTENT FILES OK AND OTHER FILES DELETE OK SIMPLE TI

  5. Fab says:

    hey, thanks for your response!
    im terribly sorry though i can,t make out what you,re trying to tell me other then don,t open the files right?

  6. Bluserver says:

    I’m back again..

    @Fab in your case i think it’s a virus. The virus hides the folder DCIM and replace a shortcut DCIM which call the exe virus located in recycle bin that you deleted. Now the DCIM shortcut won’t work.

    Try these:
    run cmd or command console
    click Start > Run (in wiondows xp in windows vista just type in the search bar)

    In run window type cmd.

    in cmd or command console type the drive letter of your camera:

    C:\>Documnents and Settings\User>E: (hit enter)

    so it will look like this after hitting enter

    E:\>

    type attrib -r -h -s “DCIM” (hit enter)
    or
    type attrib -r -h -s DCIM (hit enter)

    And see if the folder is restored.

  7. jomar says:

    if you cannot see your photos..create a winrar archive folder and open it then find your drive in the search bar..the click it..all the files of your drive will show including the viruses if you have..copy the link where the the location of your photos and paste it to search bar of you drive..

  8. Abhijit says:

    How to remove my usb newfolder.exe Virus??? plz help me

  9. mela says:

    my laptop was virused and my flash drives..it happened when my friend borrowed my fash drive and when she returned it to me i saw files with names ‘porn’ ‘sexy’ and ‘secret’ .. i cant open my pictures and songs.. then my laptop was infected because i dont have anti virus.. please help.. and one more where can i download free anti virus? and usb disk security?

  10. Lee says:

    everytime i put my USB in my laptop ,it starts showing this files, x.exe, porn.exe, secret.exe, password.exe,sexy.exe and then it will affect all the other files that are on the usb,
    How do i remove this please

Leave a Reply

* Copy this password:

* Type or paste password here: