MSFN Forum: USB AutoRun Viruses - MSFN Forum

Jump to content


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

USB AutoRun Viruses Rate Topic: -----

#1 User is offline   galahs 

  • Advanced Member
  • PipPipPip
  • Group: Members
  • Posts: 401
  • Joined: 01-December 05

Posted 03 January 2010 - 09:50 PM

I have just had an encounter with a USB Thumbdrive virus that is activated by the autorun feature in Windows.


The virus killvbs.vbs installs itself onto your computer after inserting an infected USB storage device when Windows tries to automatically run or open the device.

So a good safety measure to prevent these viruses is to TURN OFF the auto run feature in your version of wndows. A web search on the topic will tell you how.



To manually remove killvbs.vbs virus I had to:

1. Remove all thumb drives from the Computer and turn off autorun

2. Ctrl + Alt + Delete, Task Manager, Processes, wscript, End Process

3. Delete killvbs.vbs from the c:/windows/system32 folder

4. Delete killvbs.vbs and autorun.inf from all infected usb storage devices

5. Search for killvbs.vbs in the registry
--- If you have C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wscript.exe C:\WINDOWS\system32\killVBS.vbs --> modify the key and delete everything after the comma so it now reads C:\WINDOWS\system32\userinit.exe
--- delete all other registry keys that are found to contain killvbs.vbs


OR


Use a virus sacanner and keep it up-to-date and scan all USB storage devices you plug into it.


Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

2 User(s) are reading this topic
0 members, 2 guests, 0 anonymous users



All trademarks mentioned on this page are the property of their respective owners
Copyright © 2001 - 2013 msfn.org
Privacy Policy