Author Topic: madalas ba kayong na-virus ? virus na galing sa usb (Read 17349 times)

madeline07 · « **Reply #20 on:** February 23, 2008, 02:51:08 PM »

eh panu naman po pag nabura ung.vbs script file??? wat po gagawin??? d ko kc ma open ung C ska ung Usb ko eh???

Philippine Electronics Forum · « **Reply #20 on:** February 23, 2008, 02:51:08 PM »

0b00000111 · « **Reply #21 on:** February 23, 2008, 03:22:30 PM »

Quote from: madeline07 on February 23, 2008, 02:51:08 PM

eh panu naman po pag nabura ung.vbs script file??? wat po gagawin??? d ko kc ma open ung C ska ung Usb ko eh???

right click nyo na lang then explore.

Philippine Electronics Forum · « **Reply #21 on:** February 23, 2008, 03:22:30 PM »

madeline07 · « **Reply #22 on:** February 23, 2008, 03:42:33 PM »

Ayaw nya pa rin po mag open eh....

Philippine Electronics Forum · « **Reply #22 on:** February 23, 2008, 03:42:33 PM »

clarkent · « **Reply #23 on:** February 23, 2008, 03:56:44 PM »

try mo kayang irestart.

Philippine Electronics Forum · « **Reply #23 on:** February 23, 2008, 03:56:44 PM »

madeline07 · « **Reply #24 on:** February 23, 2008, 04:05:31 PM »

ok try ko....

Philippine Electronics Forum · « **Reply #24 on:** February 23, 2008, 04:05:31 PM »

creedcradle · « **Reply #25 on:** February 23, 2008, 04:15:50 PM »

Uy! atake na naman ang brontok.. trojan gawa ng taga indonesia yan... 14 years old lang.. yan ang nakuha kung traces sa mga gawa niya... medyo mayabang kasi yang batang yan kaya may text na "Embrace Islam or you will die.." na ksama sa trojan files na yan..

nga pala at worst case, pagne-restart mo ang pc, mag HALT yan sa boot process kasi pinapagana niya ang program before log-on screen.. malupit din talaga yan...

as much as possible work your troubleshooting sa safe mode with networking...

1. remove all traces/processes bago mo gawin ang .bat file na eexecute mo...
2. delete this file c:\windows\shellnew\ , tapos view hidden files, lahat ng hidden files delete mo
3. go to start up menu, tanggalin mo lahat ng di mo kilalang start up items...
4. go to c;\windows\temp -delete mo lahat ng laman dito
5. search for the file na tinanggal mo sa start up , then delete it..

-creedcradle

-creedcradle

mArKhAo · « **Reply #26 on:** February 23, 2008, 07:20:29 PM »

deep freze

Siramiko · « **Reply #27 on:** February 23, 2008, 08:56:50 PM »

Quote from: madeline07 on February 23, 2008, 03:42:33 PM

Ayaw nya pa rin po mag open eh....

punta ka ng dos prompt,
start -> run enter
type cmd.exe

then type

Quote

cd\
attrib -h -r -s autorun.inf
ren autorun.inf autorun.txt
notepad autorun.txt

yung .exe, .vbs file na nakalaman sa autorun.txt ,searh mo tapos delete

krayziebone · « **Reply #28 on:** February 24, 2008, 02:51:55 AM »

may ginawa akong prevention at removal tips..

baka makatulong..

http://xhien.net/

toasted siopao · « **Reply #29 on:** February 24, 2008, 10:36:12 AM »

Di ako madalas magkavirus pero madalas makadetect ako na galing sa USB.

bbench · « **Reply #30 on:** February 24, 2008, 10:47:21 AM »

opo jujuju pano po kasi ung comp.lab. sa school kung anu anung virus ang nakalagay d manlang ireformat ang mga comp

buti nlng andyan c parameterx para iscan ang mga usb namin jejeje thnx tol!

WildSwan · « **Reply #31 on:** February 28, 2008, 12:37:22 PM »

This is what I do...

No need to dissable auto-play.

We must understand that the only way for any virus na kumalat via USB is to be able to AUTORUN. so how does a virus does this? It creates autorun.inf. Basically, laman nitong file na ito is a call to a hidden executable file na nasa USB. Once it run, the virus attaches itself sa OS. So kahit idelete mo yung autorun.inf, walang use. Since active na sya, all it needs to do is write the autorun.inf file sa USB device.

The file has the following attribute +H +S +R... so hindi mo ito makikita sa explorer. Pero you can access it directly and in read-only mode.

Itong tip ko, effective ito kung hindi ka pa infected. Once you do this, it is guarenteed na hindi magkakaron ng chance na mainfect/maka infect USB mo. The virus may still be able to copy itself sa USB mo, pero it will never be able to run.

Tama na kwento. Follow this steps:

1. go to DOS prompt or command promt.
2. go to your USB drive.
3. type "MD autorun.inf" without the qoutes.
4. type "CD autorun.inf" without the quotes.
5. type "COPY CON protect.txt" without the quotes.
6. press enter key
7. press F6
8. press enter key, you should see 1 file(s) copied message.
9. type "ATTRIB +H +R +S protect.txt" without the quotes.
10. type "CD\" without the quotes.
11. type "ATTRIB +H +R +S autorun.inf" without the quotes.

You are done. Basically, you have created an autorun.inf directory. It is hidden, systemized and read-only. There is no way now that anything can be able to create autorun.inf file in your USB. The file protect.txt inside the autorun.inf directory is just there to make sure that the autorun.inf directory will never be deleted.

HTH.

Kaizer03 · « **Reply #32 on:** April 29, 2008, 05:58:54 AM »

hope my kaizer killer can help you =)

http://www.freewebs.com/gigz_09/kaizer_killer.rar

drx2k · « **Reply #33 on:** July 16, 2008, 07:06:45 PM »

Quote from: mArKhAo on February 23, 2008, 07:20:29 PM

deep freze

yah, deepfreeze lang ang katapat nyan, kahit walang antivirus yung PC mo, basta naka freeze yung drive, di naman kasi tulad ng ibang virus yung vbs script virus na kumakapit sa boot sector ng hdd. kahit mag propagate yung .vbs virus sa naka-freeze na hdd, pag restart na PC wala na yan.

saka nasa pag iingat di naman yan, wag kasi basta-basta mag open ng flash drive para di ma-infect ng virus

gatasngpusa · « **Reply #34 on:** July 31, 2008, 12:27:48 AM »

Quote from: WildSwan on February 28, 2008, 12:37:22 PM

This is what I do...

No need to dissable auto-play.

We must understand that the only way for any virus na kumalat via USB is to be able to AUTORUN. so how does a virus does this? It creates autorun.inf. Basically, laman nitong file na ito is a call to a hidden executable file na nasa USB. Once it run, the virus attaches itself sa OS. So kahit idelete mo yung autorun.inf, walang use. Since active na sya, all it needs to do is write the autorun.inf file sa USB device.

The file has the following attribute +H +S +R... so hindi mo ito makikita sa explorer. Pero you can access it directly and in read-only mode.

Itong tip ko, effective ito kung hindi ka pa infected. Once you do this, it is guarenteed na hindi magkakaron ng chance na mainfect/maka infect USB mo. The virus may still be able to copy itself sa USB mo, pero it will never be able to run.

Tama na kwento. Follow this steps:

1. go to DOS prompt or command promt.
2. go to your USB drive.
3. type "MD autorun.inf" without the qoutes.
4. type "CD autorun.inf" without the quotes.
5. type "COPY CON protect.txt" without the quotes.
6. press enter key
7. press F6
8. press enter key, you should see 1 file(s) copied message.
9. type "ATTRIB +H +R +S protect.txt" without the quotes.
10. type "CD\" without the quotes.
11. type "ATTRIB +H +R +S autorun.inf" without the quotes.

You are done. Basically, you have created an autorun.inf directory. It is hidden, systemized and read-only. There is no way now that anything can be able to create autorun.inf file in your USB. The file protect.txt inside the autorun.inf directory is just there to make sure that the autorun.inf directory will never be deleted.

HTH.

how to disable autorun?
and also how to get to usb drive using Dos like what you stated in number 2?

'yus · « **Reply #35 on:** July 31, 2008, 07:50:22 AM »

Quote from: gatasngpusa on July 31, 2008, 12:27:48 AM

how to disable autorun?

one way is to use yung TweakUIXP na nasa control panel:

gatasngpusa · « **Reply #36 on:** August 01, 2008, 08:37:03 PM »

Quote from: yus on July 31, 2008, 07:50:22 AM

one way is to use yung TweakUIXP na nasa control panel:

thanks,then what is the answer to the other question?

'yus · « **Reply #37 on:** August 01, 2008, 09:40:12 PM »

Quote from: gatasngpusa on August 01, 2008, 08:37:03 PM

..then what is the answer to the other question?

yung using DOS?

open mo lang yung command prompt, then type mo lang yung drive letter ng USB drive mo, the colon..
for example, drive E ang naka-assign sa USB mo,
type mo lang sa command prompt: E: then press Enter

Ugin · « **Reply #38 on:** August 01, 2008, 09:57:25 PM »

Try to use this one. Tried and tested:

http://www.mediafire.com/?eyj9cwcjyty

zaki · « **Reply #39 on:** August 05, 2008, 09:26:57 PM »

pano po ba to?...
lahat ng file microsoft word pag inopen ko nagkakaron ng duplicate tapos nawawala din?...
hindi madetect ng antivirus ko...
pano po ba matatanggal to?...HELP.........

Philippine Electronics Forum · « **Reply #39 on:** August 05, 2008, 09:26:57 PM »

Author Topic: madalas ba kayong na-virus ? virus na galing sa usb (Read 17349 times)

Philippine Electronics Forum

Philippine Electronics Forum

Philippine Electronics Forum

Philippine Electronics Forum

Philippine Electronics Forum

Philippine Electronics Forum