How to Kill this Virus using Linux ?

**Lakshmipathi** · 02-19-2009

Hi -
I Have a program (Virus) in my pendrive.(When i used the pendrive in a net cafe,it got into my
pendrive via M$ windows)

It renames all directories/files to .exe

From my Linux Machine ,i can view these files- all ends with .exe
When trying rm command it gave permission denied / read-only file system

Code:

rm -rf /media/*.exe

it's a Vfat FS.
I tried using debugfs /dev/sdb1 in write mode,

Code:

debugfs -w /dev/sdb1

It throws an error saying "Read-Only File system"

How to get rid-off this virus? Formatting is the *only* way?

**devils casper** · 02-19-2009

Try to remount partition with umask=0 option.

Code:

umount /dev/sdb1
mount -t vfat  /dev/sdb1 /media/sdb1 -o defaults,umask=0

**Lakshmipathi** · 02-19-2009

Thanks devils casper ,I will try this out and let u know the results

**Lakshmipathi** · 02-20-2009

Thanks devils casper , It worked perfectly. I removed all the .exe files from pendrive ..I got one final issue,i have directory (g444) whose permission bits are not set.

It comes as question ? and i can't remve this directory and it's files.
This directories file name are contains ??? and some other junk character.

How to remove this directory.?rmdir or rm -rf is not working with this directory.

Thread Tools

Display

How to Kill this Virus using Linux ?

Posting Permissions