xax_su

...which holds all the important backup files for a system I had to reformat and reinstall windows xp on.

The memory stick was used to backup the important files on the computer that was then formatted and then had win xp reinstalled. Using the clean computer some *.exe files (drivers, programs) were put on that stick as well to be later transferred to the formatted computer, "to speed up" the installing procedures. So the stick has all kinds of files on it, including .exe files...

The memory stick has been used in the past to transport files between the two computers, the virut infected one and this one. This computer seems to have not been infected, I've ran the kaspersky online scan, avast scan and "dr.web cureit" scan without any traces of virut. The other computer has been reformatted and windows reinstalled, clean as well.

I haven't used the usb stick since then but it has the files I need and it might contain few viruses as well.

I'm asking how to deal with. I'd really like those files back but the virut is not the kind of stuff I'd like to test waters. If I plug the stick in my computer there is the risk of infecting my computer...?

If there is no way to get those files back - is there even a way to get that usb stick back? I mean, safely format it? Or should I just throw it away? The only really valuable stuff on that stick is the backups, the stick itself is not worth much.

Thanks for any help :)

amateur

Yes, there is.

I am sure there will be better suggestions, but I would disable autoruns of the removable drives first so that it will not run as soon as it's inserted. Then, attach the memory stick and have it scanned with the same online antivirus applications you used before. Delete the infected incurable exe files and save the rest of the data. Then you can format it.

xax_su

I used tweak ui to disable all autostarts, updated the virus scanner and downloaded the kaspersky online scanner to be ready. Then I put the stick in...

I've just run the kaspersky online scan (scanned just the stick) and it shows one infected file but the scan report doesn't show anything (probably because I used Opera web browser...). So there is one infected file but I am not able to see what file is actually the infected file or what is it infected by.

Then I ran the panda online scan which found one .exe file that was infected by the virut. I then opened my file browser and deleted the file. However, avast detected the .exe file at this point! I chose the avast to delete the file. Hopefully the virut didn't spread... The file was deleted though :).

Anyways, I'm now running the panda again after which I'm going to run the kaspersky again, this time scanning the whole computer just to be sure

I'll post my findings once the scans are finished (not the logs, at least on this section ). If both scans find nothing I can be pretty sure that the stick and machine are clean, right? :)

amateur

I wouldn't keep any .exe or .scr files. Just save your data. The latest versions of Virut are very destructive and there's no cure other than formatting.

xax_su

Ok, I've moved the files to the computer, formatted the stick and scanned the whole system with 3 online scans (panda, eset and kaspersky) and it seems to be clean. :)

Thanks for the help :)

amateur

You're welcome.