My home PC, which is using Windows, got infected by a variant of W32.Blastclan. What I know are the following:
1. The virus copies itself to all of the infected drives and folders by making an executive file which has the name '[FOLDERNAME].exe'.
2. The size of the file is 290,816 bytes.
After reading some information about the find Ubuntu command line program, I figured out that the way to remove all instances of this virus from my removable drive would be to mount my flash drive into an Ubuntu PC. Then I navigate to /media/ISLESV and issue the following command: find -name '*.exe' -size 290816c -exec rm '{}' \;
The -name and -size options tell the find program that I would like all 290,816-byte *.exe file to be returned. Of course, there might be a legitimate program which satisfies these criteria, but the chance is very slim. The -exec option tells the program to execute rm {filename} for every file so far found.
Labels: virus

