Removing the virus VirusRemoval.vbs
I found my home computer and a few thumb drives infected with this virus. The only indication that something was not right was that whenever I plug in my multi-card reader into my USB port, a message will pop up saying that the drive is empty or something to that effect; or in other words, something was trying to write to my multi-card slots. So I examined my thumb drives and SD cards and found these hidden files VirusRemoval.vbs and Autorun.inf on it. Luckily this virus doesn't do anything more damaging than changing the home page of Internet Explorer and propagating itself onto portable drives. And I was able to remove it with a few simple steps. Symptoms of the virus: If a computer is infected, then the following are true. The file VirusRemoval.vbs can be found in the Windows system folder c:\Windows\System32\ as a hidden, readonly file. The HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon\ registry entry will be set to start up the VirusRemoval.vbs scr...