• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1025
  • Last Modified:

Unable to recognise USB device after virus detected

A virus was detected in c:\windows\system32\drivers and quarateened by McAfee now I can not load a printer or USB pen drive.  The mouse and keyboard work OK

I used the Acer recovery disk and it made no difference.  I uninstalled and reinstalled the USB drivers in the device mnanage and it made no difference.  I installed another PCI USB card and the pen drive works but the printer still will not.

I do not know the name of the file that was infected
1 Solution
You might try reinstall printer drivers again.
In addition to reinstalling the printer driver, you might consider using some additional utilties to clean out your computer of possible viruses or trojans.  Rarely will just one get every possible pest.  It is possible that your computer may also be infected with spyware and there is a free utility you can install to rid your computer of that class of threats:  http://www.spybot.info/en/index.html.

As a last resort, but one that may actually take a lot less of your time, would be to restore your system from a backup image file, such as is created by such software as Ghost, if you have made backups regularly.
Send us your HijackThis (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) log, remove all USB drivers with
and let Windows reinstall them, and remove the "UpperFilters" and "LowerFilters" values from:
in regedit.
jimcrintAuthor Commented:
Punky: reinstalling the printer drivers does not work as it fails when it trys to install the USB print driver

Scorpio-Rising: First thing I did was check for evidence of spyware, viruses and rogue process.  The ACER system restore disk had been used but was not very functional

orangutang: My brain starts to wake up when I read your post.  I have done this before and it is succesful.  By the time I got your post I had already started a reapair of XP which was sucessful.  I suspect it was USB driver files used to load processes such as printer and mass storage device was quaranteened.  Either it had a virus or was a false positive.  I can not see the original file so I can not cofirm this

Thankyou for your help, although I didnt try your solution I do now remember that it has worked on a previous solution so i will award the points to you


Featured Post

SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now