pc virus question

I have seen some knowledgeable topics on IT stuff here so was hoping someone can help me.

I have a virus on my portable which changes the files to unaccessable shortcuts. When I scan it with free avast it doesnt find anything, symantec found virusses, fixed it but the files are still shortcuts.

It doesnt screw up my pc, but jumps to the next flash plugged in.

any advice please?

Put on a AV? Microsoft has a free AV

Microsoft security essensials. I dropped avast.

I will try that, I will try anything.
But I do not feel positive, this is a pretty potent virus, you can format you flash, take it out and it will be there again.
And how do I get my folders fixed?

What is the name of the virus?

the problem is the virus is already on your pc. so everytime you boot up the virus activates and every flash drive or portable device you plug in the virus just replicates itself on there.

get AVG free, boot up your pc in "safemode" then run the AVG scanner. it will clear everything, but depending on the spread of the virus, if some of your more crucial files have been infected and AVG can't clean it will be quarantined or deleted.

So there is a possibility that your windows will crash, but hey at least it will be clean again. In the event your PC does crash after the clean up, reinstall windows from your original disc and choose the repair option and voila. your old stuff will be back, your pc running and best of all no viruses.

Unless you go and plug in another infected portable. LOL.

To minimize the spreading of viruses disable the auto run feature on the USB ports.

Best of luck, hope this helps.

You folders and files aren't deleted its just hidden, its very annoying. If you manage to get the virus removed, open your command prompt or just select run from start menu and type in cmd and hit enter.

run the following command line and hit enter:

attrib -s -r -h (drive name and folder, e.g C:\windows\ or just C:\ or A:\ depending on what it is you want clean.)/D

that should bring ur files to light again.

Hi,

I might sound cruel but i catch a good giggle at people who complain about viruses when they're running a crap AV such as AVG free or Avast. The word "free" puts me off automatically. "Free" anti virus programmes are rudamentary programmes that only scan for the most basic of viruses and then still cant do anything to really fix the problem.

Get a fully licensed AV such as Kaspersky or Norton depending on what machine you are running. These programmes run in the background and scan your machine 24/7 365. They utilise a lot of RAM and might slow your machine down. But when you weigh up the options, i would rather have a slow safe machine than one thats infected.

Think of it like this... would you rather have Durex covering your penis when sleeping with a bangkok prostitute or a government issue condom??

I agree with "imtheish" the virus has already spread to your pc and that would mean getting a proper AV as suggested or formatting hard drives and reinstalling windows. When doing this please dont forget to make a back up of all important docs,music, videos etc...

When thats been done and you have a new AV thats not "FREE" scan the back up of all you docs,music,videos etc to make sure that the virus has not spread there.

Then your machine should be machine!!

I have always been fine on free AV, I just generally avoid the Bangkok prostitutes. Studied in Potch but this virus comes from Stellenboschs network. I just cant see myself spending R500 and at the moment I am pretty sure the bought, full protection AV wont help me.

The virus was scanned with my companies AV and no fix.

I googled it and it seems to be a common topic, but I found this...

[strike]· I had the a variation of this problem, which was caused by the program CIEUHU.EXE. it sucked.... basically what it did was change all folders on my flashdrive to shortcuts, but the drive still showed that it had data. The fix for this is was relatively easy for me and I hope it works for you.

1. Go to control Panel, Folder Options -- select VIEW--- select Show hidden files and folders and uncheck Hide protected operating system files (recommended) now click APPLY

2. go to your folders and it should show you all your folders hidden including the virus

---

delete the virus and all the shortcut folders that have no data in them. create new folders and copy the data from YOUR hidden folders into them. once that is done delete the old hidden folders.

3. enter task manager--- find the program that is still running which will have the same name as the one you just deleted off the hard drive---- right click it and select open file location---- this should show you the virus location---- delete it!

4. return back to control panel, Folder options select view

---

select DO NOT show hidden files and folders and recheck Hide protected operating system files (recommended)

5. Restart computer---- open task manager and ensure that the program is no longer running[/strike]

I can do this fix halfway. I can see my stuff but cant delete the useless shortcuts or find the virus.

the investigation continues..


Update: This is beating me, I thought maybe the virus scan the company made removed the virus, but checking the log from that scan and comparing it to the processes running on my pc I cant find any matches.
Ideas?
Guess I will google this to death then

So security essesntials not an option?

Other easy way to fix any virus, 99% of them are programs that run without you knowing right? So boot up into safe mode, then enable a firewall that has a application/program filter and set the default policy to no, maybe Kaspersky Security Suite, it will then prompt you for which program it wants to start, deny anything that doesn't look right, be careful you don't allow a program that has a very similar name. Then run a virus scan and it will clean it off.

However once it gets to this level I find it much better just to reinstall, then I know 100% I am clean. It's the same with clients machines that have been 'hacked' and backdoors or rootkits added, yes you can use something like tripwire and make sure the hashes match, however I would still advise the client to reinstall and in future let me secure the box than come to after the damage has been done

I am busy checking if my virus isnt maybe already deleted and I only need to fix the problems.

I am on my work lap top now, can not install or change stuff, will try the windows essentials and such on my own pc whenever I am home again.

I have Symantec on this one though, I think it is a crappy one but maybe it works.

Whorthwhile to buy Bitdefender? That is mostly the only one I see for sale always.

at the moment Eset NOD32 is the better AV package.

as with all AV products they only effective if the user is smart. I personally use AVG free, coupled with Spybot. both are free apps and i've never been infected.

but if you were to purchase a product Nod32 is a good buy.

Symantec has gone done over the years, the newer product don't instill much trust in me.