All removable drives were disabled after a malware attack?

Hi, I don't know if my situation is unique. I've been trying to find answers to no avail. This is what happened. One of the computers at the office had a virus (olhrwef.exe and all other resulting files). The computer already had the removable drives disabled while the malware was still there:

1) when you insert a usb flash drive, the computer recognizes it as unformatted (file system in RAW) and asks if the drive should be formatted.

2) when you insert a cd in the drive, it does not read its contents and displays blank in the explorer.

Note that these removable media can be read normally when inserted in other computers (the contents of the flash drives, cd's can be seen if inserted in other pc's)

I already removed the malware successfully using various tools and registry tweaking but all removable media still cannot be read on this pc.

Are there any registry entries that can be edited to fix this? Please help if anyone knows how to enable all the removable media again. Thank you in advance!

Hi gothdaddee,

Try going through Device Manager and uninstalling USB root hubs, then restart the computer. The reboot should automatically reinstall the USB hub devices.

Also, you can check your services:
Start -> Run -> services.msc

Then search for:
Plug and Play
Universal Plug and Play Device Host

Make sure they are started.

Best regards,

subexpression

 Mail this post

This entry was posted on Sunday, May 31st, 2009 at 3:03 am and is filed under unique content tool. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

One Response to “All removable drives were disabled after a malware attack?”

  1. subexpression Says:

    Hi gothdaddee,

    Try going through Device Manager and uninstalling USB root hubs, then restart the computer. The reboot should automatically reinstall the USB hub devices.

    Also, you can check your services:
    Start -> Run -> services.msc

    Then search for:
    Plug and Play
    Universal Plug and Play Device Host

    Make sure they are started.

    Best regards,

    subexpression
    References :

Leave a Reply