Lots of people are having the same problem with a damn new virus, here at my university. It spreads via USB memory sticks or external hard drives, and “converts” all the files into shortcuts.

I say “Converts” because the real files are still there, even if the user is not able to see them.
__________________________________________________________________________________________________
.

Ingredients

.
1. A decent Antivirus. If you already have one and the computer is still infected, uninstall it and try another brand

2. The sick USB memory stick, hard drive, etc. (Do not plug it in yet!)

3. An Internet connection to update the antivirus (oh, really?).
__________________________________________________________________________________________________
.

Step 1

.
First thing you have to do is disabling Autorun: Yes! the window that pops-up everytime a storage device is plugged in.  If you see the silly window, the virus may have entered into your system.


The easiest way to disabling Autorun is downloading and executing this file http://downloads.pcworld.com/pub/new/privacy___security/DisableAutorun-zip.zip. Say YES when the message box appears. Credits go to Nick Brown and PC World
__________________________________________________________________________________________________
.

Step Two

.
Now that Autorun is disabled, proceed to scan your  computer with the updated antivirus
__________________________________________________________________________________________________
.

Step Three

.
Now it’s safe to plug the USB memory or hard disk in. The antivirus should catch the worm at this point, but even if it doesn’t keep going with the next steps.

__________________________________________________________________________________________________
.

Step Four

.

To remove the virus you will need to actually see it at the first place.

I’ve written the following steps on this Windows XP computer, but the icons are the same on Vista and 7

1. Click on Start

2. Control Panel

3. Pick Folder Options

4. Click on “View” tab

Clear the following checkboxes
5. Hide protected operating system files (Recommended)
6. Hide extensions for known file types


__________________________________________________________________________________________________
.

Step Five

.
Detelete Spotlight-V100, .Trashes, ._. Trashes, Autorun.inf, and everything you don’t recognize as yours. Delete the shortcuts too, because they are part of the infection.

.Exe? Kill it too!


__________________________________________________________________________________________________
.

Step Six (and last)

.
On Windows Vista and 7, click on start, and type cmd in the first box you see

If you are using Windows XP, click on “Run” first, and type cmd

Now you will see a black window, waiting for your input

Write the code as shown and hit ENTER. Replace X with the letter of your infected USB flash stick or hard drive (in my case it was “F”). Wait a few seconds

Thanks to this site for the commands.
__________________________________________________________________________________________________
.

Finished Work

.
Your files should look clean by now

I find this procedure is totally harmless, but hey: I don’t want lawsuits, witchcraft, voodoo, or anything against me. I take no responsibility for any consequence: as everything on this site, try it at your own risk.

Thanks to Wikipedia by the Autoplay screenshot

Advertisement
Comments
  1. George La Green says:

    if “Engallamientos.wordpress.com” didn´t help me, my usb memory now could be in the usb cemetery! Thanks!

  2. Super scared says:

    THANKS!! You saved my life!

    I had 8 Gb of pics of a 1 month long trip and was super scared of losing them all… The steps were of great help! Now everything is back to normal!

    Thanks again :)

  3. Poll David says:

    my files are converted to .lnk that’s all i see.. should i delete it?

  4. Manjeet says:

    thnks …..thnks alot……. .i was so afraid …i thought i have to format my hdd….but because of you only i kill that virus…….one again thnx…keep doing this things…:)

  5. Ravietej says:

    Wonderfull.Thanks.Amazing dude I love I wont Forget you In my LIfe.I cried soo much
    i romed soo many place and people and they didn’t nothing…..
    You Are Best!!!!!!!!!!!!!!!!!!!!!!!!

  6. jeanette says:

    hi, just want to say it works great for me. I’ve read a lot of forums but nothing works except for this. thanllllllllllllllks again!

  7. clo95 says:

    if you delete all the shortcuts that have the viris
    will the material inside them be deleted as well?
    for example: photos, videos, documents?

  8. Andreea says:

    Your help is priceless. Thank you. Greetings from Romania. :)

  9. Your help is priceless! Thank you. Greetings from Romania. :)

  10. Riki says:

    Thanks! You are a lifesaver!!!
    After obtaining this virus at uni, I’ve been searching extensively for a solution & your steps worked brilliantly!

    & “clo95″, I was also apprehensive about deleting the shortcuts but after step 5, the files return back to normal:)

  11. RQ says:

    Dudeeeee!!!! you save my life . I almst freaked out when I saw my files like this. No tiene recio esta ayuda.

  12. Leila says:

    hey i got access denied after step six :(

  13. RQ says:

    Second time I have use these steps… You’re definitely on my bookmarks! Thanks again!

  14. Dylan Root says:

    Took a while but I finally got there.. Dude you’re a lifesaver!!

  15. Nursya says:

    OMG thanks alot. I’ve searched for a whole lot information, but it didnt work. Your solution worked perfectly. Thanks alot again! :D

  16. Hassan says:

    access is denied to files

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Connecting to %s