How To Remove The Autoran Virus

Table of contents:

How To Remove The Autoran Virus
How To Remove The Autoran Virus

Video: How To Remove The Autoran Virus

Video: How To Remove The Autoran Virus
Video: How to Remove Shortcut/Autorun Virus from Pen Drive 2024, April
Anonim

Viruses that spread via flash drives by exploiting a vulnerability in the autorun function are now widely spread. If your computer is running a Linux operating system, then it is not only immune to such viruses, but can also be used to cure flash drives infected with them.

How to remove the autoran virus
How to remove the autoran virus

Instructions

Step 1

Make sure that the flash drive is not using the NTFS file system and that it is not write protected. Connect it to a computer running a Linux operating system.

Step 2

Start the console.

Step 3

Log in as root user using the following command: su

Step 4

Enter the login and password of the root user.

Step 5

Enter the following command: mount -t vfat / dev / sda1 / mnt / sda1 If the flash drive is not connected, try the other two commands in turn: mount -t vfat / dev / sda / mnt / sda1

mount -t vfat / dev / sda2 / mnt / sda1 The second of these commands may be needed mainly when connecting an iPod Video player. Also, in some distributions, it may be necessary to replace the mnt folder name with media.

Step 6

Start the Midnight Commander program with the following command: mc

Step 7

Using this program, use the mouse or arrow keys to navigate to the following folder / mnt / sda1

Step 8

Delete the following files: autorun.inf, desktop.ini, index with any extension. Enter the names of all suspicious exe and com files located in the root folder of the flash drive into the search engine. If it turns out that viruses are spreading in files with such names, remove them.

Step 9

Check other folders on the flash drive for the same files. Files are deleted using the F8 key.

Step 10

Close Midnight Commander by first pressing F10 and then Enter.

Step 11

Go to the root folder of your computer's file system: cd /

Step 12

Disconnect the flash drive: umount / mnt / sda1

eject / dev / sda1 (or sda, sda2)

Step 13

Wait until the LED on the flash drive stops blinking, then disconnect it physically. Remember that such a treatment cannot completely replace antivirus scanning, and also that after connecting to any infected computer, the flash drive will become infected again. Therefore, before connecting any flash drives to it again, check it yourself using an antivirus.

Recommended: