• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

how recover data from usb memory after remove autorun.exe

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Computer Forensics and Incident Response

View previous topic :: View next topic  
Author Message
fabiombolo
Just Arrived
Just Arrived


Joined: 09 Dec 2008
Posts: 0


Offline

PostPosted: Tue Dec 09, 2008 7:13 pm    Post subject: how recover data from usb memory after remove autorun.exe Reply with quote

Hi there,

I connected this usb flash pen:
http://www.sony.it/product/sm-micro-vault-entry-level/usm2gjb#pageType=Overview

to a pc with the free antivirus AVG wich detected the trojan dropper.vb.yk and removed the file E:\run\autorun.exe

Actually no pc (win xp or win 2000) is able to recognise my usb flash pen, and i can't even format it!

Any suggestion?
Tks...
Back to top
View user's profile Send private message
ron.vanza
Just Arrived
Just Arrived


Joined: 30 Oct 2008
Posts: 3


Offline

PostPosted: Tue Dec 09, 2008 11:32 pm    Post subject: Reply with quote

Hi

use photorec
Back to top
View user's profile Send private message
fabiombolo
Just Arrived
Just Arrived


Joined: 09 Dec 2008
Posts: 0


Offline

PostPosted: Sun Dec 14, 2008 10:43 am    Post subject: PhotoRec can't see my usb flash pen Reply with quote

I tried PhotoRec, but the flash pen is not read but my pc, so i cannot select it even from photorec!
Back to top
View user's profile Send private message
larsmhansen
Trusted SF Member
Trusted SF Member


Joined: 11 Jan 2003
Posts: 0
Location: Boston, MA, USA

Offline

PostPosted: Sun Dec 14, 2008 4:26 pm    Post subject: Reply with quote

The USB drive doesn't look like anything special. Check in Disk Manager if it shows up there, and see if you can wipe it clean.

The autorun shouldn't even matter, it should show as just another disk.

Try booting from a Knoppix CD and see if you can do something with it there...
Back to top
View user's profile Send private message Send e-mail Visit poster's website MSN Messenger
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Computer Forensics and Incident Response All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register