1. Insert the infected removable
disk.
2. Allow viewing of files and folders
and show file name extensions.
Go to the Control Panel, then Appearance
and Personalization, and then Folder
Options. Click the View
tab and then under Advanced
Settings, click Show hidden
files, folders, and drives and uncheck Hide extensions for known file types. Click OK.
3. Open Windows Task Manager.
For Windows 8:- Press Start. Search for it by typing
"Task Manager."
For Windows 7 and XP: - Press Ctrl +
Alt + Delete, and select Task Manager from
the menu that appears.
4. Go to the process tab and select “wscript.exe”.
Look for wscript.exe. Click on it, and click the End task button after.
5. Run the Command Prompt (CMD) and
enter this command: attrib -h -r -s /s /d [replace this with USB drive
letter]:\*.*
6. Now see your drive and you will
find a .vbs file (sky-blue icon file)
5. Go to My Computer and search for
all files that have the file name which you have seen in your USB drive [ABXXYZ.vbs]
without the brackets.
Run the Command Prompt (CMD) and
enter this command: attrib -h -r -s /s /d [replace this with drive
letter]:\*.*
6. Delete all of the files found in
the search with the name [.vbs] all at once.
These files are found in the
following locations:
- Temp
- Start-up
- Removable disk (or whatever you named it)
Once they have been found, select
all of the files named ABCXYZ.vbs
in these three different locations, and delete them altogether. If it says it
can damage your computer or something and asks you if you would like to
continue, just say YES.
7. Open your removable disk and
delete all shortcuts that were created by the
virus.
8. Run the Command Prompt (CMD) and
enter this command: attrib -h -r -s /s /d [replace this with drive
letter]:\*.* and press Enter.
Press Enter! J
3. A dialog box will open in front of you .
