Virus on USB Stick - refusing to die

I had a virus on my USB stick that I may have mentioned in the annoy thread. Formatting the USB stick doesn’t seem to have killed it as I plugged it into my PC here and Avast detected it. Run a full scan and it killed it before it installed (I didn’t use the autorun menu so it didn’t install that way as it appears to install itself that way).

How can I get rid of this nasty if even a reformat wont kill it?
Also I cant find it on my home PC, work PC or any PC’s it’s used off the top of my head recently.
Is it best to bin the drive and get another?

fdisk time, sounds like it could be in the partition gap.

DT.

I did use Gparted to reformat it, that wont have done that then?

no, I don’t think so. There are some clever people out there, you are sure it’s not an encrypted USB drive and a false positive?

DT.

manufacturers format utility? if its just a small cheap drive bin it and get another

You could also try a Disk Editor. If you can find one that is. If so just change one sector will handle the issue. Try something like this http://mh-nexus.de/en/hxd/

A tool I like is dban which will overwrite all user accessible parts of a drive (MBR, partition tables, partitions and their contents, and unpartitioned space). Make sure you boot from that not the drive. If it remains after a good wipe, then I’d suspect a false positive.

It’s not a false positive. Or if it is, it’s a damn clever one as I found the folder in Linux and could browse through it hence how I found the virus name.

Probably about tuime I got a new one so it’s headed in the direction of the recycling.

[QUOTE=drezha;450952]It’s not a false positive. Or if it is, it’s a damn clever one as I found the folder in Linux and could browse through it hence how I found the virus name.

Probably about tuime I got a new one so it’s headed in the direction of the recycling.[/QUOTE]

post it to me I will fix it.

Probably more than it’s worth! :wink:

I still have my state of the art repair tool, if you need help.
http://forums.teamphoenixrising.net/showpost.php?p=432525&postcount=1

@Vortex - look like I might need it - the Sandisk cruzer I just put into my PC is infected as well :frowning:

And it appears it might be because my work machine is infected though I cant see the registry keys and McAfee hasn’t picked anything up. I gather this because typing in C:
ikalod doesn’t give an error message that the folder cant be found and just displays an empty browser window. Don’t know how it got on the machine either. :frowning:

Hammer time? http://www.youtube.com/watch?v=2c4L4CPfQY8

rmdir of the offending folder worked to rid the laptop of the bug so now to dig out Linux to wipe the USB drives again.

[QUOTE=drezha;451009]@Vortex - look like I might need it - the Sandisk cruzer I just put into my PC is infected as well :frowning:

And it appears it might be because my work machine is infected though I cant see the registry keys and McAfee hasn’t picked anything up. I gather this because typing in C:
ikalod doesn’t give an error message that the folder cant be found and just displays an empty browser window. Don’t know how it got on the machine either. :([/QUOTE]

Don’t like Mcafee. Misses too many nasties and is bloaty…

[QUOTE=Vortex;450986]I still have my state of the art repair tool, if you need help.
http://forums.teamphoenixrising.net/showpost.php?p=432525&postcount=1[/QUOTE]

Me likes Wheel guns for the punch and no possibility of Jamming.

Like dirty Harry says: “I know what you’re thinking. “Did he fire six shots or only five?” Well, to tell you the truth, in all this excitement I kind of lost track myself. But being as this is a .44 Magnum, the most powerful handgun in the world, and would blow your head clean off, you’ve got to ask yourself one question: Do I feel lucky? Well, do ya, punk?”

That should do it. You might want to look to wiping the free space too, which though it sounds somewhat illogical, seems to work.