Remove AntiShortCut and AntiUsbShortCut Worm !

MetroUI_Other_Antivirus
View Details

New USB Worm AntiUsbShortCut.zip !

It installs in the system root folder:

  • C:\AntiShortCut\AntiUsb.exe
  • C:\AntiShortCut\AntiUsbShortCut.zip

Create autostart files:

  • %USERSTARTUP%\AntiShortCutUpdate.lnK
    %USERSTARTUP%\AntiUsbShortCutUpdate.lnK

It makes persistent with windows registry

  • HKCU\..\Run : [AntiShortCutUpdate] C:\AntiShortCut\AntiUsb.exe “C:\AntiShortCut\AntiUsbShortCut.zip”
  • HKCU\..\Run : [AntiUsbShortCut] C:\WINDOWS\system32\cmd.exe /c start C:\AntiShortCut\AntiUsb.exe “C:\AntiShortCut\AntiUsbShortCut.zip” & exit

Propagation

The infection will then spread on removable media by trapping its contents in order to deceive you and to spread to other computers.

 

You can Delete it from system root folder and then remove its registry keys .

Please scan every usb flash drive you plug in your system with a Giant-Updated Antivirus such ESET SMART SECURITY or NORTON .

Here you can choose the best suitable antivirus software for your home system : https://www.av-test.org/en/antivirus/home-windows/windows-10/

 

5 comments

  1. Hi, I’ve removed it with ccleaner. Just went to Tools > Startup> Looked for “antiusb” entry, right click and opened with regedit. Then I deleted the entries asociated. You have to be logged in with administrator account.

  2. As quickly as I finish posting this remarks, I am going to dispurse connect to this post to all of my good friends and family. I know a few of them will value the opportunity to find out more about this. A big thank you to the writer of this post! It’s terrific to read some more practical information regarding this subject.

Leave a Reply

Your email address will not be published. Required fields are marked *