FlashGuard.exe or DriveMonitor.exe or DriveGuard.exe worm runs a process named with any of the .exe names.FlashGuard.exe also add itself to system startup, you can see through msconfig command.It also creates startup key in registry to run itself every time on system boot.
Remove FlashGuard.exe Worm
1. Inorder to remove FlashGuard.exe from your computer you need to first end its process running in task manager, right click the process and select end process
2. Search for the files tmp.exe, delete DriveGuard.tmp.exe or gHmpg.tmp.exe and locate and delete these files.
3. Go to Start Menu –> Run, type msconfig and press Enter key.
4. Now, open registry to delete the startup key created by the FlashGuard.exe Worm,
5.Open Start Menu–> Run, type regedit and press Enter key
Navigate to the Following path
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\FlashGuard
Now, you need to open your virus infected pen drive and delete the following files
pen drive letter\System\Security\DriveGuard.exe *
pen drive letter\autorun.inf
I hope the solution provided above will help you fix the problem.
Post a Comment