Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have an infected USB that is loaded with trojans, spywares, Sality, etc. Basically, I wish to put my important data somewhere, reformat the USB, then restore the data.

I have prepared a freshly installed operating system that is virus free. It seems like the only way to reformat the USB is to plug it into the PC.

Is it true that as long as I disable USB drive autorun, there is no way my clean computer can get infected by the infested USB?

Alternatively, is it true that if I delete autorun.inf on my USB, even if I have autorun enabled on my PC, there is no way I can get infected?

Also, how can I safely copy my data files from the USB to my clean computer, so that I can reformat my USB, then restore the files back to the USB?

share|improve this question
    
By default autorun is disabled on any version after and including Windows Vista. of course if your drive is infected this fact won't protect you from infecting your computer. You should clean the drive before you plug the drive into your computer. –  Ramhound Jun 10 '13 at 11:23
    
@Ramhound, however how can we clean a drive without plugging it into a computer? Isn't it a chicken-egg problem? –  Pacerier Jun 10 '13 at 11:41
3  
I would disconnect the HDD, boot to a live cd, and clean the device. Otherwise I would use a system that is restored after every boot, used to clean an unknown device, with signatures that are pdated weekly. –  Ramhound Jun 10 '13 at 11:45

2 Answers 2

If you are keen to see the files, or gather files from the USB, boot into a live CD and then go into the device.

share|improve this answer
    
Simple as that. Just don't mount your HDDs. –  KamikazeCZ Jun 10 '13 at 11:44
    
What do you mean by booting into a live CD? What's the difference between booting the OS normally and booting from a live CD? –  Pacerier Jun 10 '13 at 11:50
    
Start using hirens boot(Mini XP / Mini Linux), or any other live OS. It will help you out a lot! –  Rene Brakus Jun 10 '13 at 11:50
1  
A livecd runs totally off ram, and shouldn't be affected by a virus. Since a good chunk of viruses are designed for windows, a linux livecd might also end up being immune to the specific virus –  Journeyman Geek Jun 10 '13 at 11:52
3  
Maybe you could expand your answer a little more, explaining why this is the preferred solution. –  slhck Jun 10 '13 at 12:15

When you disable autorun nothing should run on your computer. But there could be other possibilities to infect your computer by simply connecting a USB stick (see stuxnet as remarked by Ganesh R.).

The same sentence holds true for the second question (there could be other ways).

Reformating the USB stick should help as long as the stick is not modified in hardware.

The best you can do is to connect your USB stick on a computer that has a different OS. Then the possibilities to infect this computer is low (but not 0).

share|improve this answer
3  
Stuxnet used a vulnerability in Windows Photo Viewer, where just by viewing the contents of the infected drive, the virus infected the PC. So you cannot always guarantee that disabling autorun would be sufficient. –  Ganesh R. Jun 10 '13 at 11:29
    
@Uwe, how do I reformat the USB stick without plugging it into a computer? –  Pacerier Jun 10 '13 at 11:42
3  
This answer is just plain wrong. There are more ways other then autorun to infect the host computer. Stuxnet and Flame were just to well known infections. –  Ramhound Jun 10 '13 at 11:43
    
@Uwe. That is assuming I even open the files with Windows Photo Viewer. I definitely don't open the files, I simply move them somewhere, reformat the USB, then move them back. In what ways can my PC be infected this way? –  Pacerier Jun 10 '13 at 11:52
1  
@Pacerier as said in the other answer use a live CD and disconnect all HDD from the compuer. Then you cannot infect any existing HDDs. Also use an unusual OS for the live CD to minimize the risk to start the malware even then. –  Uwe Plonus Jun 10 '13 at 13:47

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.