The word “Virus” is a threat to users of Windows. Users feel uneasy to connect others USB or pen drive to their Computer for the inflections made by Virus. Viruses spread in Computer to Computer through the pen drive or any removable disk drive. Mainly Autorun.inf or many .exe files like newfolder.exe, ravmon.exe etc affect the documents of your computer. If you try to delete the file from the directory they come back automatically every time and it easily spreads in the computer.
Tip: Clean Your Computer Removing Antivirus Live Application.
These Autorun or .exe files are written in such a manner that when we try to open or rename a drive a specific program starts as a result we can’t do those works.You can remove viruses from Task Manager. You have to stop the affecting process from “Task Manager” by choosing that process as “End Task” in Task Manager. But the virus programmer are much aware about that so when you want to open “Task Manager” by pressing “Ctrl+alt+del” you will see that the “Task Manager has been disabled by your administrator“.
Also read: How to make a folder undeletable
In this situation there is another process to remove autorun.inf from Command Prompt. That seems more effective. You have go through some commands only. But the Command Prompt may be disabled by the virus. You can download a replacement of the Command Prompt.
However after getting the access of Command Prompt you can apply the following tricks to remove the virus from your computer.
Related: Remove Virus Manually From Your Computer.
First click the “Start” button and go to “Run“. You can also press “Windows+R“. Type “cmd” there.
Type the following commands in the Command Prompt
- Type “<Drive_name>:” in the command prompt and hit “Enter“. (“Drive_name” is where the problem occurs, it may be any USB drive)
- Type “attrib” and hit “Enter“. (This shows the files that are present in the currently working directory. You can also use the command “dir/w/o/a/p“)
- If there are any file named autorun.inf then go for next steps else the drive is not affected with any autorun.inf file.
- Type “attrib -h -r -s -a *.* ” then hit “Enter“. (This command removes the Hidden, Read Only, System and Archive attributes over any file)
- After unhiding and removing attributes you can see the files. So you can delete the file now.
- Type “del <filename>” in the Command Prompt and hit “Enter“. (As for example del autorun.inf)
Now your computer is virus free. Enjoy! Feel free to share your experience with us.
nice guide.
Also, if your computer is infected with a RAT (Remote admin tool – that gives full access to the hacker… e.g. you see your mouse moving automatically. LOL )
Do this >
1. open CMD (Start > RUN > type: cmd )
2. Type in: netstat – ano
(it shows all ur network accessing process with their Process identification codes = PID )
3. if you see a Text like this > ESTABLISHED with a foreign IP, note down its PID.
It will also show the EXE accessing it.
4. go to TASK MANAGER (CLTR + ALT + DEL)
– then go to VIEW > Tick PID
5. in the Proccess TAB > just click that PID process EXE file.
6. now disconnect your internet & scan your whole Computer with SpyBot SD 1.6 & NOD32 v.4
7. your are virus free now.
NOTE: you will say why didnt i disconnected internet at Start !! thats cus teh RAT virus will also get exit, will come again whn u access the net & netstat needs internet connection ON to show PID.
@Ajinkya
Very nice tips. Thanks for sharing.
Pen Drive Format Error write protect
Pls give me Solution
You have worm in a pendrive or system .get a antivirus which is updated.I Prefer avast
i want to know the code to cleaning my machine of any viruses and how to check them also mainly using command prompt.
tnks but a question would deleting those files result in lose of files?
sory pls are my going to include the quotes when writing the the command prompt bcos when i typed”", it said the command is incorrect.PLS
@Mko Abiola: NO..don’t include ” signes.
@tanmy pls when i typed drive_name it said the command is an incorrect command
type drive_name means that you type the drive letter. As for example you should type d: and hit enter.
plz solve my pen drive problem which shown ‘remove the write protection’, I am tired about my problem, I can’t use pen drive, what is solution ?
Nirmal
i learn a lot of things in this website….and i was thankful for that…
i have a 8gb pendrive that not formt that is having virus plese give me solution.
guys, when inserting my flush in machine and try 2 open it, it said the drive is empty. cud u plz help.
good way, or try this one too ;)
http://adf.ly/8DMh1
http://adf.ly/8DLSY
i don know how to thank you..All i can i say is,,keep up.easy to understand, i even wish you were my teacher.thanks alot.
how do you know if it’s a virus or not?
tanx…but i need help! My laptop is suffering from virus i dont know abt nd i can install an antivirus…plss i really need help.
This line of code only deletes what you chose it to, though, if you know where the virus is located (i.e. the directory (C:\ Drive for Windows) Press “Tab” to browse through the files on your local drive. This works:
@ECHO OFF
prompt $p$g
title algeeroidbiletdoux System
FlashX
:Shredder
color 02
CLS
ECHO.
ECHO algeeroidbilletdoux System
FlashX
ECHO DRIVE SHREDDER
ECHO.
dir /a/w
ECHO.
ECHO “PRESS THE TAB KEY IN
YOUR KEYBOARD TO SELECT ON
THE DIRECTORY”
ECHO.
SET /P M= SHREDD
IF NOT EXIST %M% GOTO
:driveShredderERROR
attrib -s -h -r %M%
del /f /q %M%
IF NOT EXIST %M% GOTO
:SHREDCOMP
RD /S %M%
:SHREDCOMP
COLOR 0A
echo MyBox = MsgBox(“File/Folder
has been Shredded. File/Folder has
been removed…”, 6000,
“algeeroidbilletdoux System
FlashX”) >driveshredder.vbs
start /w driveshredder.vbs
del /f /q driveshredder.vbs
GOTO :Shredder
:driveShredderERROR
COLOR 0A
echo MyBox = MsgBox(“The
File/Folder you type does not exist
and match in the directory.”, 6000,
“algeeroidbilletdoux System
FlashX”) >folderatt.vbs
start /w folderatt.vbs
del /f /q folderatt.vbs
GOTO :Shredder
Please help.. when I used this steps. It says that access denied or unable to change attrubute.. What will I do with this???
mga master help plzz.. i knw how to delete viruses but anyone knows how to fix USB FLASH DRIVE with a write protection ,it can’t be format kc may protection file. pki email nlng qng cno marunong ….plzzz.. rtf-return the favor(bashkatana@yahoo.com)
is it effective also on windows7 ?
Thank you so much!Now I can use my usb virus-free….Really appreciate it!<<>> :))
i hve NORTON antivirus updated, but cant delete write protect file frm pen drive sandisc……plz help
pls…help ihav virus on my usb flash drive i keep deleting it but it comes back…pls. help
i nid a help plz i tryed this method of using cmd to delete virus bt stl gves mi a problm the computes says access is denied how to solve this plz i wnt to delete ths thng of autorun
how to remove tha virus by using run cmd
it didn’t work .i did all the steps in cmd and it appeared AUTORUN.INF access denied.. help me i dont know what to do :( all my files are gone.
I cant delete the autorun because it says that it is being used by other processes or user etc.