Heal Pendrive v2.0
Heal Pendrive v2.0
Download
Features:
*This tool can be used to remove virus/suspected files from pendrive.
*Instructions are provided at the botom of each step.
*Build on VB.net, this application is much superior to the previous v1.0
*Improved “hunt-and-delete” has been integrated in this version.
+Automatic selection for connected pendrive.
+Details for the selected drive.
+Displays contents of autorun.inf
+Individual options to fix registries.
+Calls CHKDSK utility to detect and fix bad sectors.
+Most appreciating “hunt-and-delete” feature with multiple options.
Whats not:
-Files marked for deletion are deleted permanently.(not sent to Recycle Bin)
-Registry change is not reversible.
-This tool only to be used on removable drives.
Whats next:
*Safely remove drive feature in the next builds.
Safely Remove/Delete autorun.inf file
Safely Remove Autorun.inf
Start ? Run ? cmd
Type
c:\Documents and Settings\abc\>x:
x:\>dir /a autorun.inf
Check if the autorun file exists
If yes, then change the attributes of the file by typing
x:\>attrib autorun.inf -R -H -S
Now you will be able to see the autorun.inf file visually in Windows Explorer.
View the contents of autorun.inf (using the safe method mentioned above), before you delete them.
Delete the file by typing
x:\>del /P /F /A autorun.inf
If you are unable to delete the autorun.inf file
or
the autorun.inf file appears again and again.
Then you can conclude that your system is infected by some virus.
In such case you have to remove the virus from your system then only you can get rid of this autorun.inf.
Precautions while using pendrives
Precautions
- Double-clicking a drive may infect your computer with the virus on the drive.
- Even
Right-click?OpenorRight-click?Exploremay lead to the virus infection. - If you think that autorun.inf can infect only if its in the root folder of a drive, then you are wrong. Think again. Even network drives have autorun properties. A network drive linked to a folder, containing an infecting autorun.inf file, on a network behaves the same way, when you double-click the drive.
Using Autorun.inf Folder
If you create a folder named AUTORUN.INF in the root directory of a drive, most of the viruses are unable to delete such folders to replace with their own infecting autorun.inf file, this is possible because almost all the virus programs have codes to replace/delete the autorun.inf file and not the folder. You may be safe for sometime, but not longer until a better virus breaks in.
Best Practices
- To view files inside a drive to use the tree-view of Windows Explorer.
My Computer?View?Explorer Bar?Folders
Click on the removable/pendrive on the left side tree-view folder panel to explore, instead of double-clicking the drive. - Typing the drive name on the address-bar of Windows Explorer.
My Computer? click on Address Bar ? Typex:\
How to view contents of Autorun.inf file
Old Practice/Risky Technique:
Type x:\autorun.inf in the address bar of windows explorer. This will open the autorun.inf file in a notepad if it exists.
What’s the problem?
If there exists a virus file named autorun.inf.pif it will get executed.
How to safely view the file?
Safe Method: Start ? Run ? notepad File ? Open ? "x:\autorun.inf"

Posted by Piyush in

Autoruns