1. This is the screenshot of my USB content after I plug into infected computer
The virus hide all my files and folders as well, and change everything into a shortcut that call Documents.vbe when executed.
2. The virus change the files and folders attribute by using system user, so when you try to change the attribute by right clicking it, you can't change it's hidden attribute.
3. Open your command prompt and go to your USB drive. In our case the USB is in E: drive.
attrib -H -S E:\* /S /D
Counter Measures
1. Turn off Auto-run for all of removable media.
2. Do not double click your USB folder to prevent the virus spreading into your system.
The virus hide all my files and folders as well, and change everything into a shortcut that call Documents.vbe when executed.
2. The virus change the files and folders attribute by using system user, so when you try to change the attribute by right clicking it, you can't change it's hidden attribute.
3. Open your command prompt and go to your USB drive. In our case the USB is in E: drive.
attrib -H -S E:\* /S /D
Counter Measures
1. Turn off Auto-run for all of removable media.
2. Do not double click your USB folder to prevent the virus spreading into your system.
No comments:
Post a Comment