Cold/Hott Virus

[gibbo_ap]

has anyone come across this before. i think a teachers pen drive has infected my pc. although nothing seems to be picking it up.

it creates folders in your pen drive called cold/hott and auTORUN.inf in the root

and makes the pendrive show in my comp as a folder. having googled round i found various references to how to remove but have had no joy. panda usb vaccine seems to have done the best > it no longer shows as a folder and the autorun seems to be blocked now, but the folders are still there and reappear when deleted

any ideas?

[Arcath]

Remove the autorun?

if the autorun protects it self hold down shift as you plug it in so the autorun isnt run.

[tech_guy]

Use MalwareBytes and/or A-Squared to get rid of it.

[gibbo_ap]

Remove the autorun?

if the autorun protects it self hold down shift as you plug it in so the autorun isnt run.

i have deleted the autorun but it reappears seconds later,

i have trawled the net further and found the name of the regkey : microsoftNS.exe, i searched and deleted that

............. just had another 2 members of staff coming with them arrggg

[nephilim]

linux live disk, put the USB sticks in when linux live disk is running, delete the files, no chance of them coming back as they cannot run on linux, jobs a good'un!

Had this ourselves and thats how we fixed it.