Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Check if camera memory card is infected

flash drive memory card virus malware

  • Please log in to reply

#1
wayneman50

wayneman50

    Member

  • Member
  • PipPipPip
  • 430 posts

I have Windows 7.

 

A friend plugged the memory card from my camera into his computer to transfer some photos. I don't think he's particularly good at keeping malware and viruses off his PC. Can you help me scan my memory card in my PC for potential threats? I'm pretty sure I have Panda vaccine installed on my memory card.

 

Thanks.


  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,009 posts
  • MVP

This is probably overkill the last step should probably be enough but if you are feeling paranoid:

 

I think the default on Win 7 is not to autorun but just to be safe get Autorun-Eater

 

http://www.gamefront.../aesetup2.6.exe

 

And install it first.    It will prevent any autorun from working.

 

When you plug in the camera card it should tell you what drive it is (I'll call it x: in the following but you need to change x: to whatever your system assigns) and ask you what to do with it.  Just cancel out and then Start, All programs, Accessories, right click on Command Prompt and run as admin.  Then type (with an enter after the line)

x:

(This selects the drive.  The prompt should change to:  x: \   --Remember to change this to your letter!)

attrib -r -h -s \*.*

(Makes all files visible)

del \autorun.inf

(deletes any autorun.inf file.  It may not find one. I'm not familiar with what your panda vaccine does - probably creates a folder called autorun.inf.  You don't need to remove the folder just the file.  To create your own:  )

mkdir \autorun.inf

(It may say the directory already exists which is OK)) 

del \desktop.ini

(deletes any desktop.ini file.  It may not find one.)

mkdir desktop.ini

(It may say the directory already exists which is OK)) 

 

Now right click on start and Open Windows Explorer and find the X: under Computer.   Right click on it and tell your antivirus to scan the drive - I have Avast and it shows the orange ball and Scan X:\ )

 

Card should now be safe to work with.


  • 0

#3
wayneman50

wayneman50

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 430 posts

Thank you for contacting me about my question.

 

I installed Autorun Eater, did the first couple commands you specified, and got the results in the screen shot attached. I stopped there. Please advise.

Attached Thumbnails

  • Capture.PNG

  • 0

#4
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,009 posts
  • MVP

What does it say if you do:

G:

dir /a

  • 0

#5
wayneman50

wayneman50

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 430 posts

Please see attached.

 

FYI, I'm pretty sure someone from geekstogo had me turn off autorun a couple years ago.

 

Panda vaccine is software someone from geekstogo told me about. It's supposed to help prevent malware from getting on to flash drives. So I used it on my memory card too.

Attached Thumbnails

  • Capture.PNG

  • 0

#6
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,009 posts
  • MVP

I expect the file autorun.inf is from your Panda.  The date on it is pretty old so nothing recent.  

 
It's acting like someone has changed the owner on the file and removed full control.  

 

You might try to read it and see what it says:

type g:\autorun.inf

(Type is part of the command)  or open it in notepad:

notepad g:\autorun.inf

  • 0

#7
wayneman50

wayneman50

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 430 posts

"Access is denied" on both commands. Maybe that's the Panda vaccine keeping anyone from messing with it?


  • 0

#8
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,009 posts
  • MVP

Probably.  I think it's safe to go ahead and have your anti-virus scan the card and then open the card.

 

If you really want to you can right click on "start" and Open Windows Explorer and then find G:\ and click on it.  Then you can right click on autorun.inf and select Properties then Security and Advanced then Owner then Edit and take ownership of the file.  Then you can change it to give yourself Full Control but it sort of undoes Panda's work.


  • 0

#9
wayneman50

wayneman50

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 430 posts

I ran Avast! Everything's ok, except for this message:

 

Attached Thumbnails

  • Capture.PNG

  • 0

#10
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,009 posts
  • MVP

If Avast can't read it then no one else can either so it should be safe.  I'm sure it's Panda's idea of a vaccine.


  • 0

#11
wayneman50

wayneman50

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 430 posts

So you think I'm good to go?


  • 0

#12
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,009 posts
  • MVP
Yes if the autorun.infwas bad it would have to point to a virus .exe and Avast would have found it
  • 0

#13
wayneman50

wayneman50

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 430 posts

Thank you. It's ok to close this topic. I appreciate your time.


  • 0






Similar Topics


Also tagged with one or more of these keywords: flash drive, memory card, virus, malware

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP