| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 114891 | 2010-12-22 06:36:00 | External HDD | chuanwai (12518) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 1163944 | 2010-12-22 06:36:00 | I have a WD external hdd, and i plugged it into my mates laptop it installed some random recyling bin and auto run. I plug it back on my pc and i cant open a few of the files most of my stuff comes up with a random error. How do i fix tis i needa the data. They show up as application. E:\autorun.inf - INF/Conficker worm - cleaned by deleting (after the next restart) - quarantined E:\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx - Win32/Conficker.AB worm - cleaned by deleting (after the next restart) - quarantined E:\E Drive.exe - Win32/Packed.FlyStudio.O.Gen potentially unwanted application - action selection postponed until scan completion E:\F Drive.exe - Win32/Packed.FlyStudio.O.Gen potentially unwanted application - action selection postponed until scan completion E:\H drive.exe - Win32/Packed.FlyStudio.O.Gen potentially unwanted application - action selection postponed until scan completion E:\Notepad.exe - Win32/Packed.FlyStudio.O.Gen potentially unwanted application - action selection postponed until scan completion E:\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx - Win32/Conficker.AB worm - cleaned by deleting (after the next restart) - quarantined |
chuanwai (12518) | ||
| 1163945 | 2010-12-22 07:22:00 | What AV are you using to scan the External Drive ? It should remove it. Other Wise run This here (download.cnet.com) trough it, or this (en.kioskea.net) - also gives a few more instructions. looks like your friends Laptop is badly infected- ANY drive thats attached will more than likely also get infected, including your Own PC if your AV is not up to scratch. |
wainuitech (129) | ||
| 1163946 | 2010-12-22 07:30:00 | yea im using eset and its not taking it out at all it just keeps coming back and all my drives are set as applications so bloody annoying i need to get rid off tis | chuanwai (12518) | ||
| 1163947 | 2010-12-22 07:46:00 | Have you got system restore enabled, if so you may want to turn it off, as soon as you reboot it will reinfect. Also disable the autorun. As per part of that last link --"However, Conficker is quite difficult to remove, because it creates files that are associated with legitimate Windows process as Svchost." Had the problem before when the Av took conflicker out, the system wouldn't boot anymore due to corruptions of the system files. Eset should stop your Own PC from getting infected though.(scan it first) READ THIS as well (blog.eset.com) Failing cleaning, you may need to boot the CD from a linux Live CD ( something like ubuntu), which will see your files on the external drive. Transfer to the PC, or like I did copy them Via Ubuntu to another second external drive rescan the files once transfered, then format the infected drive and copy back. |
wainuitech (129) | ||
| 1163948 | 2010-12-22 10:42:00 | I don't have that much skill with computers is there a method where i can remove the trojan or virus with a programme it looks like it sticks around i have tried removing it with eset nod32 and it remains. Its locked 3 of my drives in my hdd and thats where all my photos are which i really need to recover. | chuanwai (12518) | ||
| 1163949 | 2010-12-22 11:13:00 | Disable system restore, then try trojan remover if this is 32 bit. or try The symantec removal tool (www.symantec.com) <- direct link From here (www.symantec.com) |
Speedy Gonzales (78) | ||
| 1163950 | 2010-12-22 11:27:00 | where can i find trojan remover, im trying symantec 1 now | chuanwai (12518) | ||
| 1163951 | 2010-12-22 11:33:00 | http://www.simplysup.com/ | feersumendjinn (64) | ||
| 1163952 | 2010-12-22 11:36:00 | Direct link (www.simplysupersoft.com). From here (simplysup.com). Install / run it, update it then click on scan. If it finds anything remove it. Then you may have to reboot. Then run it again, then select all of the options under utilities to reset everything | Speedy Gonzales (78) | ||
| 1163953 | 2010-12-22 11:39:00 | Just wanted to clarify, i split the external hdd into different folders and 3 of the folders r classed as application now and eset is constantly having to block it due to the viruses. Im dling simplysup now, thanks speedy was waiting for you the whole night to respond lol | chuanwai (12518) | ||
| 1 2 | |||||