[Ganryu]

Hi guys. I have a USB drive infected with a virus. The virus hides in an exe file that is hidden in a fake RECYCLER directory on the drive. The infection (which comes from my stationary machine) then adds an autoron.inf file that is set to run the infected exe upon insertion into another computer.

I. Do. Not. Want. That. To. Happen.

That computer has a crippled internet connection and there is no network (it would just infect this machine). I need to access the data on the USB drive without infecting this laptop and that means I have to somehow prevent windows from running autorun on that drive.

How do I do that?

I need to be 100% sure that the autorun file instructions are not executed. The files cannot be removed while the memory stick is inserted in the stationary machine. I need to be able to access the USB drive from a computer that does not auto-run the exe.

Any help is appreciated.

[Advertisements]

Advice here: http://www.techworld...ers_autorun_fix
Fix from Microsoft (applies to Vista SP1 and above also): http://support.microsoft.com/kb/967715

[usasma]

Advice here: http://www.techworld...ers_autorun_fix
Fix from Microsoft (applies to Vista SP1 and above also): http://support.microsoft.com/kb/967715

[Broni]

http://discussions.v...ad.php?t=238013
Panda USB Vaccine, and Flash Disinfector

[Ganryu]

Advice here: http://www.techworld...ers_autorun_fix
Fix from Microsoft (applies to Vista SP1 and above also): http://support.microsoft.com/kb/967715

Thanks, but...

The update says "this does not apply to your system". I assume then that the patch has probably been automatically installed by my system. Is there any way to verify this? AND, most importantly, HOW do I turn off auto-run? I don't know how.

[usasma]

The article in the second link describes how to do it.

[Ganryu]

I followed the instructions but it seems the autorun.inf might have triggered anyway. McAfee caught the infection and states that it removed an infection (this happened upon me inserting the USB memory stick). It said something about the autorun.inf file so I am not sure if I really have autorun disabled now (if I had why would it even mention autorun.inf?). I followed the instructions in the link 100%.

[Broni]

I suggest that you start a new topic in the Malware Removal and Spyware Removal area.

Before you start a new topic click on this link --> Malware and Spyware Cleaning Guide, Please read before starting a new topic. This will give you a few preparations to make, as well as instruction for posting your OTListIt2 log.

If you are still having problems after being given a clean bill of health from the malware expert, then please return to THIS thread and we will pursue other options to help you solve your current problem(s).